Scout Commerce

• Analyzed: May 14, 2026, 3:23 AM
• Findings: 1
• Version: 1.1.0
• Hash: dfda1013d392c7aa164e727f04d0fd325b5a484e3e166efd59d0deabc2cdd39a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle is designed for e-commerce and crypto token swaps on Solana. All network requests are directed to legitimate endpoints (`scout-api.trustra.xyz`, `api.mainnet-beta.solana.com`, `tokens.jup.ag`) consistent with its stated purpose. The `SKILL.md` instructions guide the AI agent on how to present information and use the tools, without any evidence of prompt injection aiming for malicious actions. The Python scripts manage an API key and wallet address in `credentials.json`, which is necessary for its functionality, and do not access unrelated sensitive data or perform unauthorized operations.