Back to skill
Skillv1.0.0

VirusTotal security

USDC Escrow · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:34 AM
Hash
0e1694e5f696d40cf3adec251d3fad7121a9fab22d649bffe82b02e450275a27
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: usdc-escrow Version: 1.0.0 The skill bundle is designed for trustless USDC escrow management, making API calls to `https://api.payclawback.xyz` via `curl` and parsing responses with `jq`. All shell scripts (`scripts/*.sh`) consistently use these tools to interact with the specified API endpoint, allowing for escrow creation, listing, details, release, dispute, resolution, and claiming. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, obfuscation, or prompt injection attempts against the agent in `SKILL.md` or other documentation. The functionality is clearly aligned with its stated purpose.
External report
View on VirusTotal