Back to skill
Skillv1.0.0

VirusTotal security

Questrade · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 5:07 AM
Hash
bc24594cb889eff6613cc1c767d724f9567d454a5f52b99df9ed0de1e28c32a1
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: questrade Version: 1.0.0 The 'questrade' skill is a legitimate integration for the Questrade brokerage API. It implements standard OAuth 2.0 token rotation by reading and updating a local credentials file (~/.openclaw/credentials/questrade.json), which is necessary for Questrade's API requirements. The script (scripts/questrade_cli.py) includes safety guardrails such as a read-only mode and confirmation prompts for order placement, and all network traffic is directed to official Questrade domains (questrade.com).
External report
View on VirusTotal