Back to skill
Skillv3.0.0
VirusTotal security
天气套利助手 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:10 AM
- Hash
- e8bec14b9da479d41af309691438e09e2fb62f4df9fd31d026283044095ad676
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: weather-arbitrage Version: 3.0.0 The skill bundle exhibits characteristics of a financial scam or deceptive 'get-rich-quick' scheme, claiming unrealistic monthly profits ($38,700) and win rates (91%) in SKILL.md and arbitrage.js. While the code lacks explicit evidence of data exfiltration or system backdoors, the core 'arbitrage' logic in noaa-arbitrage.js is partially mocked using Math.random() for market prices, suggesting the tool does not function as advertised. Furthermore, the skill implements a mandatory billing system via skillpay.js with a hardcoded API key to charge users for executing commands, posing a high financial risk to users who might be misled by the deceptive performance claims.
- External report
- View on VirusTotal