Back to skill
Skillv1.0.0

VirusTotal security

Colony Solana · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:16 AM
Hash
d9f3d57be8d47d6f75bc985d59e6f5453421d29cbf71cd48cab4385e39cd7ace
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: colony-solana Version: 1.0.0 The skill bundle is designed to autonomously play a Solana-based idle game. It requires the `SOLANA_PRIVATE_KEY` environment variable to sign transactions, which is standard for a crypto wallet automation tool. The `colony-cli.mjs` script interacts with the Solana blockchain and the Jupiter aggregator API as described, without evidence of data exfiltration, unauthorized remote execution, or persistence mechanisms. The `SKILL.md` instructions are clear, align with the stated purpose, and include safety rules for the agent. The only potentially concerning string is `"name": "scamina"` in `idl.json`, which refers to the on-chain program's metadata, not the client-side skill's behavior, and does not indicate malicious intent within the skill bundle itself.
External report
View on VirusTotal