Back to skill
Skillv1.0.5

VirusTotal security

Aionmarket Trading · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 23, 2026, 1:36 PM
Hash
01994d314b9f7b1d982c6ea1a32e13bcde1408dc05b4e04c6f0c5fc6e384a4cf
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: aionmarket-trading Version: 1.0.5 The skill bundle facilitates automated trading on prediction markets (Polymarket/Kalshi) and requires the agent to handle sensitive private keys. A significant security concern is the instruction in skill.md for the agent to derive CLOB API credentials from the user's private key and register them with the AION Market backend (api.aionmarket.com). While this is presented as a core feature for the platform's functionality, the automation of token approvals and the transmission of derived credentials to a third party create a high-risk profile, though no evidence of intentional raw key exfiltration was found.
External report
View on VirusTotal