NEAR Phishing Detector

• Analyzed: May 12, 2026, 4:26 AM
• Findings: 1
• Version: 0.1.0
• Hash: 2bf1d0faf2e2c70f4b99b7db0f47d6325c228f97cab0fa531be2d88a1b6014d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'near-phishing-detector' is designed to detect potential phishing URLs and suspicious NEAR contracts. The core logic in `src/phishing-detector.ts` performs local string analysis and checks against a hardcoded list of known scams. There are no indications of external network requests, file system access (beyond its own code), or arbitrary command execution. The `SKILL.md` and `README.md` files contain no prompt injection attempts or instructions for the AI agent to perform unauthorized actions. The build script's `rm -rf dist` is a standard cleanup command for development and does not pose a runtime risk. All dependencies listed in `package-lock.json` are development-related and do not introduce runtime vulnerabilities or malicious behavior.