agentcard.ai

• Analyzed: Apr 6, 2026, 9:36 PM
• Findings: 1
• Version: 1.0.8
• Hash: fcee189fcae0e310d25c71e2c39e2d74179c17e595bf1c8513fa2e4b5c9f0078
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for the AgentCard service (managed by Alchemy) to purchase and manage virtual Visa cards for AI agents. It includes tools for authentication, card creation via Stripe, and balance management, with explicit instructions in SKILL.md to handle card details as transient sensitive data and to require user confirmation for transactions. The configuration in openclaw.plugin.json properly identifies security-sensitive flags, and no evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found.