Back to skill
Skillv1.0.2

VirusTotal security

solana-bundler-sniper-volume-bot · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 4:23 AM
Hash
4935d8a75306b59eefb28c140bed7a48c2725a0b95aef4879f915c35b8b47318
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: gank-solana-bundler Version: 1.0.2 The skill provides access to high-risk financial operations on the Solana blockchain, including automated token launches, multi-wallet trading (swarm buys, volume bots), and powerful wallet management features like 'vamp-all' (drain wallets) and 'clean funds' (privacy swaps via BNB/ETH). While the API claims to handle private keys securely server-side and the skill explicitly warns against exposing API keys, the inherent capabilities (e.g., draining multiple wallets, obfuscating fund origins via privacy swaps) carry a significant risk of misuse for financial harm or illicit activities if the AI agent is compromised or misdirected. The `examples.md` also shows local file system access (`fs.createReadStream`) for image uploads, which, while legitimate for the stated purpose, represents a general vulnerability point for agents.
External report
View on VirusTotal