41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (managing a payment wallet and calling pay-per-request APIs) is coherent, but it relies on installing and running an unvetted npm package, stores private keys on disk, and the pack...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771606040778,
        "_id": "k974d716kkxgkc22wx473y9mhh81ggxy",
        "changelog": "agentcash-wallet v0.1.0\n\n- Initial release with CLI wallet management for agentcash on Base (USDC)\n- Supports checking wallet balance, redeeming invite codes, and USDC deposits\n- Enables discovery and paid usage of x402-protected APIs with automatic payments (no API keys needed)\n- Provides commands for endpoint discovery, pricing checks, and making paid API requests\n- Includes troubleshooting guidance for common wallet and payment issues",
        "changelogSource": "auto",
        "createdAt": 1771606040778,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Mason Hall",
        "handle": "fmhall",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/11855252?v=4",
        "kind": "user",
        "linkedUserId": "kn71n4dnvf41s56p1nh8d2ggsh81gdw6"
    },
    "ownerHandle": "fmhall",
    "skill": {
        "_creationTime": 1771606040778,
        "_id": "kd71n4rt4wgy66nnfjx2p539k581h2f9",
        "badges": [],
        "createdAt": 1771606040778,
        "displayName": "Agentcash Wallet",
        "latestVersionId": "k974d716kkxgkc22wx473y9mhh81ggxy",
        "ownerUserId": "kn71n4dnvf41s56p1nh8d2ggsh81gdw6",
        "slug": "agentcash-wallet",
        "stats": {
            "comments": 0,
            "downloads": 412,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Manage your agentcash wallet and call any x402-protected API with automatic payment. No API keys, no subscriptions — just a funded wallet (USDC on Base). USE...",
        "tags": {
            "latest": "k974d716kkxgkc22wx473y9mhh81ggxy"
        },
        "updatedAt": 1774325981301
    }
}