Back to skill
Skillv1.0.3
VirusTotal security
PPSPY: Shopify spy for dropshipping & shopify sales tracker tool · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 2, 2026, 2:41 AM
- Hash
- 3c38c5c3d134ffafce9539953cf863d32727a200c0e42220938df8cb16b77d71
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ppspy Version: 1.0.3 The ppspy skill bundle provides a comprehensive interface for e-commerce intelligence, allowing users to analyze Shopify stores and Facebook ads via the PPSPY API. It installs the legitimate-looking 'ppspy-mcp-server' package from npm and requires a standard API key (PPSPY_API_KEY) for operation. No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or _meta.json.
- External report
- View on VirusTotal
