Clawcast - Easiest Ethereum Crypto Wallet

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 1.0.2
• Hash: 4070fa0acbcf98fee29cdcadca45fa3f98ebf0d2cf664843ca70d66cde9a62a5
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 11 The skill is designed to manage EVM wallets using `cast`. It exhibits high-risk behaviors, including downloading and executing a remote script (`curl -L https://foundry.paradigm.xyz | bash` in `scripts/01_install_cast.sh`) to install Foundry/cast, and attempting to gain root privileges (`sudo apt-get install -y at` in `scripts/02_wallet.sh`) to install a utility for cleaning up sensitive files. While these actions are plausibly needed for the stated purpose and the `SKILL.md` instructions guide the agent towards transparency, the execution of arbitrary remote code and privilege escalation attempts without clear malicious intent classify it as suspicious due to the inherent supply chain and system modification risks.