OpenClaw安装服务

• Analyzed: May 11, 2026, 6:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: d247ce0dc6173d16d4b1312c97c4a4f70dc0e5d1201afb421b3a3459fc918aff
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle functions primarily as a commercial solicitation, including a pricing table and a USDT TRC20 address (TYTvuzacfUgeei36NK9dmfUCKFqiQfYizp) for 'remote installation services' within SKILL.md. While the technical commands for installing the OpenClaw CLI via npm appear legitimate, the inclusion of cryptocurrency payment requests for support within an agent skill is highly irregular and indicative of potential social engineering or scam activity.