Back to skill
Skillv1.0.0
VirusTotal security
Colony Solana · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:16 AM
- Hash
- d9f3d57be8d47d6f75bc985d59e6f5453421d29cbf71cd48cab4385e39cd7ace
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: colony-solana Version: 1.0.0 The skill bundle is designed to autonomously play a Solana-based idle game. It requires the `SOLANA_PRIVATE_KEY` environment variable to sign transactions, which is standard for a crypto wallet automation tool. The `colony-cli.mjs` script interacts with the Solana blockchain and the Jupiter aggregator API as described, without evidence of data exfiltration, unauthorized remote execution, or persistence mechanisms. The `SKILL.md` instructions are clear, align with the stated purpose, and include safety rules for the agent. The only potentially concerning string is `"name": "scamina"` in `idl.json`, which refers to the on-chain program's metadata, not the client-side skill's behavior, and does not indicate malicious intent within the skill bundle itself.
- External report
- View on VirusTotal
