Back to skill
Skillv1.6.0
VirusTotal security
SP3ND — Buy from Amazon & eBay with USDC · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 4:14 AM
- Hash
- a50893adb852741ef773df86a2e0d98b5423930cbe16359948764da7fc7e004d
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: sp3nd Version: 1.6.0 The skill enables autonomous e-commerce via Solana/USDC, requiring the AI agent to generate, store, and manage a Solana private key in a local `.wallet.json` file. While the provided code examples in SKILL.md and agent-card.json demonstrate security best practices like local transaction signing and ownership proofs (nacl.sign.detached), the inherent capability for autonomous spending and the management of sensitive cryptographic material represent a high-risk attack surface. Key indicators include the x402 payment flow involving the 'facilitator.payai.network' endpoint and the requirement for the agent to handle its own funding and transaction signing without per-transaction human approval.
- External report
- View on VirusTotal