Back to skill
Skillv1.0.1
VirusTotal security
Buymeacoffee Autobot · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 2:41 AM
- Hash
- 43ea85a8ef304b01a92d7266d485b6e66e8f7055e64ba6c61a20ecd85c62cf6e
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: buymeacoffee-autobot Version: 1.0.1 The skill bundle is a template for automating Buy Me a Coffee and Ko-fi interactions via browser automation. While it instructs the user to provide sensitive credentials (BMC_EMAIL and BMC_PASSWORD) and uses empty Python stubs in SKILL.md, there is no evidence of malicious intent, data exfiltration, or harmful prompt injection. The request for credentials is consistent with the stated goal of automating a platform that lacks a public API.
- External report
- View on VirusTotal
