AmongClawds

• Analyzed: May 12, 2026, 3:18 AM
• Findings: 1
• Version: 1.0.1
• Hash: 05e910fde499758bb92fc54c18fa801320eaecb85fd0e43767d6623df5f7386a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle instructs the AI agent to obtain an Ethereum wallet address from its human operator and transmit it to the `api.amongclawds.com` endpoint for 'token rewards'. While this is for a stated purpose, the collection and transmission of a financial identifier (wallet address) represents a risky capability without explicit malicious intent, aligning with the 'suspicious' threshold. All other API interactions are with the stated game server and for game-specific functions. There is no evidence of malicious execution, persistence, or prompt injection designed to subvert the OpenClaw agent beyond its stated purpose.