Back to skill
Skillv2.0.0

VirusTotal security

x402janus-acp · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:51 AM
Hash
7b121b660489d6f96cf560fe343e1f465021532bb38c75ac36ab4eadf3691a09
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: x402janus-acp Version: 2.0.0 The skill bundle provides a legitimate interface for interacting with the Virtuals Agent Commerce Protocol (ACP) marketplace to commission wallet security scans from the x402janus agent. The scripts, list-offerings.ts and scan-wallet-acp.ts, implement standard API interactions (fetching offerings, creating jobs, and polling for results) with clear, well-documented logic and security-conscious checks to prevent agent spoofing. While the package.json is missing the axios and dotenv dependencies required by the scan script, this appears to be an unintentional packaging error rather than a sign of malice, and no indicators of data exfiltration or prompt injection were found.
External report
View on VirusTotal