RedotPay Wallet

• Analyzed: May 6, 2026, 7:06 AM
• Findings: 1
• Version: 0.0.1
• Hash: 55d8d079bde6e58f7b25819685ad834b6a74c90dac4867e3bcb4a3c7980489b0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates financial transactions and arbitrary network requests via the 'redotpay' CLI. A significant risk is identified in the 'Installation Reference' section of SKILL.md, which instructs the agent to use a 'curl | bash' pattern to download and execute a remote script from GitHub (redotpay-cli/v0.1.0/install.sh). While the skill includes safety protocols like mandatory user confirmation and spend caps, the combination of shell execution, financial capabilities, and unverified remote installation scripts warrants a suspicious classification.