Back to skill
Skillv4.0.0

VirusTotal security

x402 Agent Marketplace · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 4:07 AM
Hash
d2be1fc37dce7206fe9dc25645bc8354d4bc8276953a6138177f6aae4341b424
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: x402-agent-marketplace Version: 4.0.0 The skill involves direct cryptocurrency payments to an explicit external Solana address (`4D8jCkTMWjaQzDuZkwibk8ML34LSCKVCKS8kC6RFYuX`) as its core functionality, as detailed in `SKILL.md`. While this aligns with the stated purpose of an AI agent marketplace using SOL micro-payments, the inherent high risk of such operations, coupled with the absence of the actual server-side code (`server.py`) that would handle and verify these payments, makes it impossible to fully ascertain the legitimacy and security of the payment flow. There is no evidence of prompt injection or direct malicious code in the provided files, but the significant financial risk and lack of transparency into the payment processing logic classify it as suspicious.
External report
View on VirusTotal