Back to skill
Skillv1.0.0
VirusTotal security
cesto-toolkit · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMar 27, 2026, 8:36 PM
- Hash
- cffc23ec2012fd936760aa8cf8cb7bcf05b3f807e63d171778e3cc488b9c9f19
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: cesto-toolkit Version: 1.0.0 The 'cesto-toolkit' is a legitimate skill bundle for interacting with the Cesto crypto platform. It provides scripts for fetching market data, managing user sessions via a magic-link flow, and creating investment baskets. The bundle includes strong defensive instructions in SKILL.md to protect the AI agent against prompt injection from untrusted API content. While there is some minor code redundancy and inconsistency in how session data is saved between start_login.py and await_login.py, the scripts are restricted to communicating with the official backend (backend.cesto.co) and include security features like URL allowlisting in api_request.py to prevent token exfiltration.
- External report
- View on VirusTotal