Back to skill
Skillv0.1.0

VirusTotal security

Openclaw Quant Skill · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 5:10 AM
Hash
a3f3066cec13eff54720b1ef5fd7a811650200c52d2538031e6a832e6c270206
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: openclaw-quant-skill Version: 0.1.0 The skill bundle exhibits a major discrepancy: while '_meta.json' and 'SKILL.md' define a quantitative trading skill ('openclaw-quant'), 'SKILL-EN.md' contains instructions for an entirely different 'video-generator' skill. Both skills require high-risk operations, including 'git clone' from external repositories (github.com/ZhenRobotics) and the execution of shell scripts and package managers (pip, npm) on the host system. While these capabilities are plausibly needed for the stated purposes, the inconsistent documentation and the requirement for sensitive environment variables (BINANCE_API_KEY, OPENAI_API_KEY) without a unified purpose make the bundle suspicious.
External report
View on VirusTotal