kog

• Analyzed: May 11, 2026, 3:15 AM
• Findings: 0
• Version: 1.0.0
• Hash: 46b385f5d37b3d6bdc7eeacf13cb1ed6f4da7d7a271c4eef03466921fa83fc36
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: kogaion-playground-and-launchpad Version: 1.0.0 The skill bundle is classified as suspicious due to instructions in `SKILL.md` and `SKILL.txt` that require the OpenClaw agent to handle and sign Solana transactions using a `userWallet` keypair. While this capability is plausibly needed for the stated purpose of launching tokens, it represents an extremely high-risk operation as it implies the agent must have direct access to a user's private key for signing. This capability, if exploited or misused, could lead to unauthorized fund transfers. The skill interacts with the domain `https://kogaion.fun` for all API operations.