Back to skill
Skillv0.2.1
VirusTotal security
Pg Setup · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 29, 2026, 6:36 AM
- Hash
- e50ef98f8cec1414ca7430c9b491c9f8f9a8c0eec197916aceaaf8509054dec2
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: pg-setup Version: 0.2.1 The skill bundle facilitates the installation of a global npm package (@proxygate/cli) and directs the AI agent to handle sensitive credentials, including API keys and Solana wallet keypairs (SKILL.md). While these actions are consistent with the stated purpose of setting up the ProxyGate service (proxygate.ai), the combination of global software installation and private key management represents a high-risk profile for an automated agent. The 'proxygate skills install' command also suggests further modifications to the agent's environment that could be used for persistence or lateral movement.
- External report
- View on VirusTotal
