Back to skill
Skillv1.0.0
VirusTotal security
Odds Movement Monitor 盘口监控 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 4, 2026, 11:31 PM
- Hash
- ea1c6d15332202bb12edb51077865293045df60f255ceb63202d0df9c0643ff6
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: shenmeng-odds-monitor-v3 Version: 1.0.0 The skill bundle implements a sports betting odds monitor but includes a non-standard monetization layer in 'payment.py' that integrates with an external service (skillpay.me). This file contains a hardcoded secret API key (sk_f03aa8...) and logic to automatically deduct funds from a user's account based on the 'SKILLPAY_USER_ID' environment variable. While the payment requirement is documented in 'SKILL.md', the presence of hardcoded credentials and automated financial transaction logic represents a significant security risk and atypical behavior for a skill bundle.
- External report
- View on VirusTotal