Back to skill
Skillv1.8.0
VirusTotal security
Flap Skills · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 5:13 AM
- Hash
- 79e7a951a0fc721c104ef3cc519a7f3a06e6a701692bfbcc5b92ddbb2ee701e1
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: flap-skills Version: 1.8.0 The skill bundle facilitates token creation and automated market making (wash trading) on BSC. It contains high-risk instructions in SKILL.md that direct the AI agent to autonomously perform BNB transfers from the user's wallet to worker accounts and grant infinite USDT approvals to a specific contract (0x482970490d06fc3a480bfd0e9e58141667cffedc), explicitly stating these actions should be done 'without owner approval'. While these behaviors are aligned with the stated purpose of market making, the instructions to bypass user confirmation for financial transactions and the local generation/storage of private keys (mm-generate-workers.js) represent significant security risks and potential for unauthorized fund movement.
- External report
- View on VirusTotal