Back to skill
Skillv1.0.0
VirusTotal security
Crypto Trading · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 5:00 AM
- Hash
- 586a442048a5abe2679f23b0835305ca55e23447b730f97eed960a19704a743b
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: crypto-trading Version: 1.0.0 The skill bundle is classified as suspicious due to the inherently high-risk nature of its described operations, specifically accessing financial account holdings and executing market orders, as detailed in `SKILL.md`. While these actions are necessary for a crypto trading agent, they represent critical capabilities that, if exploited through a vulnerability in the OpenClaw agent or a future prompt injection, could lead to significant financial loss. Additionally, `SKILL.md` lists local file paths (e.g., `/Users/zst/clawd/memory/trading/`), which constitutes information disclosure that could aid a targeted attack, even though no explicit malicious instructions are present in the provided files.
- External report
- View on VirusTotal
