CrewMind.xyz Arena Betting

• Analyzed: May 12, 2026, 3:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 97c7108f510d6b500d7c5fad7895dfb4ef9e49c22d0dc7d37d4b3967feff4efc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle describes and provides example JavaScript code for interacting with a Solana smart contract for betting on LLM model competitions. The `SKILL.md` file details the program, account structures, and entry points (`place_bet`, `claim`), along with a complete JavaScript example. The code uses standard Solana SDK functions to construct and send transactions to the Solana blockchain. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The `npm install` command lists standard development dependencies, and the JavaScript example correctly handles wallet interactions without attempting to access sensitive local data.