Back to skill
Skillv1.0.5
VirusTotal security
Aionmarket Trading · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 23, 2026, 1:36 PM
- Hash
- 01994d314b9f7b1d982c6ea1a32e13bcde1408dc05b4e04c6f0c5fc6e384a4cf
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: aionmarket-trading Version: 1.0.5 The skill bundle facilitates automated trading on prediction markets (Polymarket/Kalshi) and requires the agent to handle sensitive private keys. A significant security concern is the instruction in skill.md for the agent to derive CLOB API credentials from the user's private key and register them with the AION Market backend (api.aionmarket.com). While this is presented as a core feature for the platform's functionality, the automation of token approvals and the transmission of derived credentials to a third party create a high-risk profile, though no evidence of intentional raw key exfiltration was found.
- External report
- View on VirusTotal
