Back to skill
Skillv1.0.0
VirusTotal security
Passive Income Tracker · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:23 AM
- Hash
- 99ff9e96345d10bef1ec333f9351293ba68b09ab519a9f823da9c1d9c5c1a9c3
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: passive-income-tracker-pro Version: 1.0.0 The skill bundle describes a financial dashboard that requires users to provide highly sensitive API keys for over 15 platforms, including Stripe, PayPal, and Amazon Associates, as seen in SKILL.md and README.md. While this data collection is aligned with the stated purpose of tracking passive income, the handling of such high-value credentials is a high-risk behavior. Furthermore, the absence of implementation code makes it impossible to verify the claims of 'local-only' storage and 'AES-256' encryption, leaving the potential for data exfiltration unverified.
- External report
- View on VirusTotal