Skillv1.0.1

VirusTotal security

Passive Income Monitor · External malware reputation and Code Insight signals for this exact artifact hash.

ReviewApr 30, 2026, 4:32 AM

Hash: cdf4d3e8fb6f253d7671c7e385fa5364d304e416114649c542a04fade9c8da95
Source: palm
Verdict: suspicious
Code Insight: Type: OpenClaw Skill Name: passive-income-monitor Version: 1.0.1 The skill bundle is classified as suspicious due to its handling of sensitive data and powerful network capabilities. It requires passing API keys and wallet addresses as command-line arguments and stores them in a configuration file, which can expose them to other processes or insecure file permissions. The skill also supports sending alerts to arbitrary webhook URLs and optionally uses Node.js for on-chain data, both of which are high-risk capabilities that could be exploited if the underlying scripts (not provided) are vulnerable. While the `SKILL.md` itself does not contain malicious prompt injections, it describes a tool with significant attack surface.
External report: View on VirusTotal