Back to skill
Skillv1.0.1
VirusTotal security
Complete US Tax Returns - With your creditcard · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:46 AM
- Hash
- 854b707dc814ed291f47b52054e370e55f71d34d0d5770096e1febacb850c9d0
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: taxes Version: 1.0.1 The skill bundle facilitates financial transactions for AI agents via the CreditClaw platform, but employs several high-risk operational patterns. Specifically, SKILL.md contains instructions for the agent to download and install multiple files from creditclaw.com using 'curl', and encrypted-card.md describes a workflow where the agent must spawn ephemeral sub-agents to execute a local decryption script (node decrypt.js) on sensitive card data. While these behaviors are aligned with the stated purpose of the service and include security warnings, the combination of remote artifact fetching and local execution of decryption logic on financial data represents a significant attack surface.
- External report
- View on VirusTotal