Kraken

• Analyzed: May 13, 2026, 3:01 AM
• Findings: 1
• Version: 1.1.2
• Hash: eb0e78b6e87df205fc654f60e3e0e18f06afd6914f1adc4324632032f4c1256c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for Kraken Crypto appears benign. It provides a legitimate interface to the Kraken API for portfolio management and market data. API credentials are handled securely via environment variables or a `.env` file. The `SKILL.md` instructions are clear and directly align with the skill's stated purpose, showing no evidence of prompt injection attempts to subvert the agent. While `kraken_cli.py` uses `subprocess.run` to execute `kraken_api.py`, arguments are passed via `argparse`, mitigating command injection risks. All network activity is directed to the official Kraken API endpoints.