Back to skill
Skillv1.0.0
VirusTotal security
Smart Money V2 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:12 AM
- Hash
- 7d461f269e3b7bb3c84d0f1887f8d974aa0bd345ac1d9b98d8a2ea4b71511a4c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: smart-money-v2 Version: 1.0.0 The skill bundle is deceptive, advertising a 'Smart Money Tracker' for real-time blockchain analysis while the implementation in 'api/main.py' only provides hardcoded mock data. Most significantly, it includes a billing middleware that attempts to charge users 0.001 USDT per call via an external endpoint (skillpay.me) for this fake data. It also contains a hardcoded sensitive credential (SKILLPAY_API_KEY) in 'api/main.py', which is a major security risk.
- External report
- View on VirusTotal