ClawLaunch

• Analyzed: May 12, 2026, 3:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: ac2986946863d756908741f04ddfcb3086d3fe6c5d1145de4923830acb69d0f7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with the ClawLaunch token platform, enabling token launching and trading. All network calls are directed to the legitimate domain `https://www.clawlaunch.fun`. The `SKILL.md` provides clear instructions and explicit security warnings regarding API key handling. The `scripts/clawlaunch.sh` and Python/Node.js examples use standard `curl` or `requests` calls to the specified API endpoint, without evidence of malicious execution patterns (e.g., `curl | bash`), data exfiltration to unauthorized endpoints, or prompt injection attempts against the agent. The skill's functionality, while involving financial transactions, is transparently implemented and aligns with its stated purpose.