Openclaw

• Analyzed: May 10, 2026, 6:44 AM
• Findings: 1
• Version: 1.4.0
• Hash: 7a238552d762e60daedc913718441a505b73ea09e85f7a61bf07156f6c95d268
• Source: palm
• External report: View on VirusTotal

Findings (1)

The cardzero skill is a legitimate payment wallet interface for AI agents to interact with USDC on the Base L2 network. The SKILL.md file provides clear instructions for wallet lifecycle management, including a secure 'claim key' process for human owners and explicit requirements for agent-to-user confirmation before any financial transaction. There are no signs of data exfiltration, malicious execution, or deceptive prompt injection; the functionality is strictly aligned with its stated purpose of facilitating autonomous and agent-to-agent payments.