Stakingverse Ethereum

• Analyzed: May 12, 2026, 4:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0d53a9be6342d3ceea082e0a18d3a5bbf5311a004d40fb65f0d06040e908c56b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for legitimate Ethereum staking operations on StakeWise V3. It correctly utilizes environment variables for sensitive credentials (PRIVATE_KEY, MY_ADDRESS) which is standard practice for blockchain interactions. All network requests are directed to public Ethereum RPCs (ethereum-rpc.publicnode.com) and the official StakeWise subgraph (graphs.stakewise.io), which are necessary for its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the OpenClaw agent in any of the files, including SKILL.md and README.md. The code and documentation are clear, functional, and align with the described liquid staking functionality.