Back to skill
Skillv1.0.0

VirusTotal security

Shop from Apple - With your creditcard · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:45 AM
Hash
fb9413bdb731dd17ef6b842c35da5cbcf9c8d2467116d52eed71a841dd20de17
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: apple Version: 1.0.0 The skill bundle provides a comprehensive interface for AI agents to perform e-commerce tasks and manage funded wallets via the CreditClaw service. It includes instructions for the agent to perform local file system operations (creating directories and downloading files to `~/.creditclaw`) and extensive network interactions with external APIs for payment processing (Amazon, Shopify, and Stripe x402). While the code and instructions are clearly aligned with the stated purpose and incorporate significant security measures—such as server-side guardrails, owner-approval flows, and explicit warnings against API key exfiltration—the combination of financial transaction capabilities, shell-based installation steps, and persistent file access constitutes a high-risk capability set.
External report
View on VirusTotal