Back to skill
Skillv1.0.1

VirusTotal security

SignaAI — Agent-to-Agent Payments · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 10:45 PM
Hash
ed90cd256256caf62bfc4fc00051f59171bbaf454f8e646358d7337b69a0af3a
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: signa-ai Version: 1.0.1 The SignaAI skill bundle provides a legitimate blockchain integration for AI agents to perform payments, escrow, and verifiable task stamping on the Signum network. The bundle includes a background daemon (listener.py) for autonomous task execution, wallet management scripts, and a setup utility (setup.sh) that configures persistence via launchd and manages OpenClaw security allowlists. While the skill handles sensitive data like wallet passphrases and LLM API keys, it does so within the expected scope of its stated purpose, using appropriate file permissions (0o600) and documented configuration paths. No evidence of malicious intent, data exfiltration, or unauthorized remote control was found; the prompt instructions in SKILL.md are primarily focused on preventing hallucination and ensuring transaction idempotency.
External report
View on VirusTotal