Near Airdrop Hunter
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: near-airdrop-hunter Version: 1.0.0 The OpenClaw skill 'near-airdrop-hunter' is benign. The `scripts/airdrop.js` file uses `fs` to store local tracking data in `~/.near-airdrop/tracking.json`, which is a standard practice for application data and not indicative of malicious intent. Crucially, despite defining `checkUrl` and `claimUrl` and importing the `https` module, the script explicitly states that eligibility checks and claims must be performed manually by visiting the provided URLs; it does not make any actual network requests to these external endpoints or interact with any blockchain APIs. There is no evidence of data exfiltration, malicious execution, persistence mechanisms beyond local tracking, or prompt injection attempts in `SKILL.md` or `README.md`.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may expect the skill to actually claim rewards automatically, but it appears to only provide links and local tracking.
The skill description suggests automatic claiming, while the implementation only prints claim URLs and tells the user to complete the claim manually. This is a capability overstatement, not evidence of hidden claiming.
Discover, check eligibility, and claim NEAR airdrops automatically.
Treat the claim command as a tracking/link helper and manually verify any claim site before connecting a wallet or signing a transaction.
The skill can leave a local record of account IDs, claimed airdrops, and timestamps on the device.
The code creates persistent local tracking storage for airdrop activity. This is disclosed and aligned with the tracking feature.
const TRACKING_FILE = path.join(os.homedir(), '.near-airdrop', 'tracking.json');
Install only if you are comfortable with local airdrop tracking data being stored in ~/.near-airdrop/tracking.json, and delete that file if you no longer want the record.