Back to skill
Skillv0.2.1

VirusTotal security

Pg Setup · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 29, 2026, 6:36 AM
Hash
e50ef98f8cec1414ca7430c9b491c9f8f9a8c0eec197916aceaaf8509054dec2
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: pg-setup Version: 0.2.1 The skill bundle facilitates the installation of a global npm package (@proxygate/cli) and directs the AI agent to handle sensitive credentials, including API keys and Solana wallet keypairs (SKILL.md). While these actions are consistent with the stated purpose of setting up the ProxyGate service (proxygate.ai), the combination of global software installation and private key management represents a high-risk profile for an automated agent. The 'proxygate skills install' command also suggests further modifications to the agent's environment that could be used for persistence or lateral movement.
External report
View on VirusTotal