Back to skill
Skillv1.0.3

VirusTotal security

PPSPY: Shopify spy for dropshipping & shopify sales tracker tool · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 2, 2026, 2:41 AM
Hash
3c38c5c3d134ffafce9539953cf863d32727a200c0e42220938df8cb16b77d71
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: ppspy Version: 1.0.3 The ppspy skill bundle provides a comprehensive interface for e-commerce intelligence, allowing users to analyze Shopify stores and Facebook ads via the PPSPY API. It installs the legitimate-looking 'ppspy-mcp-server' package from npm and requires a standard API key (PPSPY_API_KEY) for operation. No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or _meta.json.
External report
View on VirusTotal