Back to skill
Skillv1.0.5
VirusTotal security
Bitcoin Wallet for Agents using Arkade · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 3:48 AM
- Hash
- 5d9aeed6a77e97e4d43da1393a8c12622172e2de0cf169a184cb866ca02e9346
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: bitcoin-arkade-wallet Version: 1.0.5 The skill bundle implements a cryptocurrency wallet and swap service with robust security practices, including explicit agent safety rules in SKILL.md requiring user confirmation for all fund-moving operations, and secure local storage of private keys with strict file permissions in cli/arkade.mjs. However, the pnpm-lock.yaml file indicates a patch applied to the `@lendasat/lendaswap-sdk-pure` dependency. Without access to the content of this patch, it represents an unverified modification in the supply chain, which could potentially introduce vulnerabilities or unintended behavior, thus classifying the skill as suspicious rather than benign.
- External report
- View on VirusTotal