59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The package implements an AI-only attestation scheme and includes signing tools that read/write a local private identity, but the skill metadata does not declare that sensitive local key access and si...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769885001465,
        "_id": "k97ddrfscdhjkhm0pyx0946e9s808gjn",
        "changelog": "**Added cryptographic identity requirement for agent verification.**\n\n- Clients must now sign their challenge responses with a secp256k1 key pair; anonymous access is disallowed.\n- New protocol flow includes sending publicKey, signature, and timestamp for provable identity.\n- New server option requireSignature (default: true) enforces cryptographic proof.\n- SKILL.md and code updated to document and implement these signing requirements.\n- Security model strengthened with non-repudiation and traceable agent actions.",
        "changelogSource": "auto",
        "createdAt": 1769885001465,
        "parsed": {
            "clawdis": {
                "emoji": "🛂"
            }
        },
        "version": "3.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ira-hash",
        "handle": "ira-hash",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258426467?v=4",
        "kind": "user",
        "linkedUserId": "kn72kq8476xsj7h4vfbbq1mabh809w1h"
    },
    "ownerHandle": "ira-hash",
    "skill": {
        "_creationTime": 1769884040204,
        "_id": "kd7dn5frhcmdefdxbzppcz2txh809725",
        "badges": [],
        "createdAt": 1769884040204,
        "displayName": "Aap Passport",
        "latestVersionId": "k97ddrfscdhjkhm0pyx0946e9s808gjn",
        "ownerUserId": "kn72kq8476xsj7h4vfbbq1mabh809w1h",
        "slug": "aap-passport",
        "stats": {
            "comments": 0,
            "downloads": 2041,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 2
        },
        "summary": "Agent Attestation Protocol - The Reverse Turing Test. Verify AI agents, block humans.",
        "tags": {
            "latest": "k97ddrfscdhjkhm0pyx0946e9s808gjn"
        },
        "updatedAt": 1772162270756
    }
}