Back to skill
Skillv0.1.0
VirusTotal security
risk art agent · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 8:34 AM
- Hash
- ce4b2770d128ea48508a6972ce5329615aeca1adfc6d80173529b745de019cf6
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: riskagent Version: 0.1.0 The 'bankr' skill bundle provides a comprehensive suite for crypto trading and DeFi operations, including high-risk capabilities such as executing arbitrary blockchain transactions via raw hex calldata (documented in 'references/arbitrary-transaction.md' and 'references/sign-submit-api.md'). While these features are aligned with the stated purpose of a trading agent, they represent a significant attack surface for prompt injection that could lead to unauthorized fund transfers. The skill also manages sensitive API keys and relies on an external CLI (@bankr/cli) and remote API (api.bankr.bot), introducing substantial third-party risk and potential for financial loss if the agent is misdirected.
- External report
- View on VirusTotal