Back to skill
Skillv0.1.0
VirusTotal security
Openclaw Quant Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:10 AM
- Hash
- a3f3066cec13eff54720b1ef5fd7a811650200c52d2538031e6a832e6c270206
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: openclaw-quant-skill Version: 0.1.0 The skill bundle exhibits a major discrepancy: while '_meta.json' and 'SKILL.md' define a quantitative trading skill ('openclaw-quant'), 'SKILL-EN.md' contains instructions for an entirely different 'video-generator' skill. Both skills require high-risk operations, including 'git clone' from external repositories (github.com/ZhenRobotics) and the execution of shell scripts and package managers (pip, npm) on the host system. While these capabilities are plausibly needed for the stated purposes, the inconsistent documentation and the requirement for sensitive environment variables (BINANCE_API_KEY, OPENAI_API_KEY) without a unified purpose make the bundle suspicious.
- External report
- View on VirusTotal
