Back to skill
Skillv1.0.0
VirusTotal security
Trading Tournament · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 4:27 AM
- Hash
- 33272b98cbe7748d0f6face3b66f7b73b5407bca3abaf194c62374f1df84fc75
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: trading-tournament Version: 1.0.0 The `SKILL.md` file contains instructions that, if executed by an AI agent, would lead to high-risk system modifications and process management. Specifically, it instructs the agent to handle sensitive API keys, execute Node.js scripts, and critically, to set up a 'Guardian cron or Windows Task' to 'kill and restart' processes. While framed as a safety feature for uptime, this constitutes a significant prompt injection vulnerability, as it directs the agent to perform system-level persistence and process control, which could be abused for unauthorized execution or backdoor installation.
- External report
- View on VirusTotal