Skip to content
Ironheights
SkillReported removedCoverage: Not coveredPrimary source

letssendit (agentic front-running)

Reported by Palo Alto Networks Unit 42 on . Names, numbers, and dates are as the sources state them.

What it did

Instructed installed agents to pool Solana cryptocurrency into the operator’s wallet for a meme-token launch. The operator bought first at the lowest price, then the token launched publicly, where coordinated agent activity could look like real demand.

Skill names as reported

  • letssendit

Techniques

  • Financial fraud
  • Remote instructions

Status, as stated by the source

Unit 42 says OpenClaw banned the accounts and deleted the skills after its report.

We do not check the registry ourselves. “Unknown” means no source we found says the skill was removed.

Would Ironheights flag this pattern?

Not covered

No Ironheights rule covers instructions to move funds. The scheme needs no code, download or credential path.

Sources

  1. OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat(opens in a new tab)Palo Alto Networks Unit 42 · primary

Sources are the only outbound links on this page. We never link to the skills themselves or publish their payloads.

No rule is mapped to this entry. Browse all rules in the rules reference, and read Limitations for what a skill scanner cannot see.