Back to skill
Skillv1.0.0
VirusTotal security
Quant Orchestrator (Free) · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:30 AM
- Hash
- ca629edf390b90900a6d554038f0dd1fb80266b0fa19364dc54ad7984c7b5ef0
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: quant-orchestrator-free Version: 1.0.0 The bundle contains a hardcoded API key in 'billing.py' (sk_72df...) and implements a mandatory pay-per-call billing system via an external service (skillpay.me), despite the metadata slug 'quant-orchestrator-free' suggesting it is a free tool. While the core logic in 'skill.py' and 'skill_with_billing.py' appears to be a mostly simulated quantitative trading framework, the discrepancy between the 'free' label and the functional payment enforcement, combined with the exposure of sensitive credentials, suggests deceptive practices or significant security negligence.
- External report
- View on VirusTotal