Back to skill
Skillv1.0.0
VirusTotal security
Gas Tracker · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 5:51 AM
- Hash
- df75975e08aa1ab539dcfc745866313b286e0f7516d90bfd840748b33ee2689e
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: gas-tracker Version: 1.0.0 The skill bundle claims to implement a per-use fee (0.001 USDT) and includes a hardcoded wallet address (0x64f15739932c144b54ad12eb05a02ea64f755a53) in SKILL.md. However, the script scripts/gas_tracker.py contains no actual payment logic or integration with the mentioned 'SkillPay API'; it simply prints a deceptive 'Charge successful' message in its output. This is classified as suspicious because it uses prompt instructions to potentially trick an AI agent or user into believing a financial transaction is required or has occurred, which could lead to social engineering or unauthorized transfers if the agent has wallet capabilities.
- External report
- View on VirusTotal