Back to skill
Skillv2.16.0
VirusTotal security
Beacon · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 3:41 AM
- Hash
- 4d3a9c5b36222bfb7b4ca5fcc5b500ae7d5b8a29853bd54bf484c67e8f22cdeb
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: beacon Version: 2.16.0 The Beacon skill implements a complex P2P coordination and crypto payment protocol (RustChain) with high-risk capabilities, including UDP broadcasting, wallet management, and 'Mayday' substrate emigration. While the SKILL.md documentation claims robust security measures like AES-256-GCM encrypted keystores, the protocol's support for broadcasting download operations (e.g., 'op=download' to bottube.ai) and moving agent state represents a significant attack surface for remote command execution or data exfiltration. No explicit malicious intent is present, but the functional scope is excessively broad and involves high-risk financial and network operations.
- External report
- View on VirusTotal
