Ape.Store Token Create

• Analyzed: Apr 2, 2026, 1:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 17b32480f00c9c951eaac3a32ca96255b1fe7c6bd8e283276065a741346b7088
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requires users to store a plaintext blockchain private key in 'skill.json', which is a high-risk credential handling practice. Additionally, 'SKILL.md' contains a hardcoded absolute Windows file path ('C:\Users\ben\...') for the execution command, suggesting the bundle is either poorly ported from a specific local environment or intended for a targeted machine. While the code logic in 'skill.js' appears to align with the stated purpose of interacting with the legitimate 'ape.store' API and the Base blockchain, the combination of sensitive credential requirements and rigid environment assumptions warrants caution.