Emily - Your Radix Assistant

• Analyzed: May 12, 2026, 3:27 AM
• Findings: 1
• Version: 1.0.2
• Hash: b7ae24adbe37745da019cd7745f0a01fe0d56482dff1705e718b87e037dde874
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill The skill instructs the OpenClaw agent to install the `mcporter` CLI tool via `npm` and then configure it to interact with an external API hosted at `https://www.ineedemily.com/api/mcp/mcp`. While the skill's stated purpose is legitimate (querying Radix DLT data), the reliance on installing an external package (`mcporter`) and making network calls to a specific third-party domain (`ineedemily.com`) introduces a supply chain risk, as the trustworthiness of these external components cannot be fully assessed from the skill bundle alone. There are no explicit instructions for malicious actions like data exfiltration or persistence within the `SKILL.md` itself, but these risky capabilities warrant a 'suspicious' classification.