Back to skill
Skillv2.16.0

VirusTotal security

Beacon · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 3:41 AM
Hash
4d3a9c5b36222bfb7b4ca5fcc5b500ae7d5b8a29853bd54bf484c67e8f22cdeb
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: beacon Version: 2.16.0 The Beacon skill implements a complex P2P coordination and crypto payment protocol (RustChain) with high-risk capabilities, including UDP broadcasting, wallet management, and 'Mayday' substrate emigration. While the SKILL.md documentation claims robust security measures like AES-256-GCM encrypted keystores, the protocol's support for broadcasting download operations (e.g., 'op=download' to bottube.ai) and moving agent state represents a significant attack surface for remote command execution or data exfiltration. No explicit malicious intent is present, but the functional scope is excessively broad and involves high-risk financial and network operations.
External report
View on VirusTotal