41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The package claims to be an instruction-only AIUSD trading skill but contains self-extracting installers, embedded base64 archives, and SKILL.md references to credentials and local token files that ar...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770426322388,
        "_id": "k97e2xs9hbj003ed5s3g63x83180pmr3",
        "changelog": "aiusd-skills v0.1.1\n\n- Added four new files: README.md, aiusd-skill-installer.js, aiusd-skill-installer.sh, and build-info.json.\n- Updated SKILL.md with stricter output guidelines, including an expanded and explicit list of prohibited phrases (especially around \"template\" and auth flows).\n- Clarified agent authentication response requirements and added zero-tolerance language on banned terminology.\n- No code logic or tool changes; all updates focus on documentation, onboarding, and compliance for agent output.",
        "changelogSource": "auto",
        "createdAt": 1770426322388,
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ChaunceyLiu",
        "handle": "chaunceyliu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/18446173?v=4",
        "kind": "user",
        "linkedUserId": "kn77ncj465rvq2n8f53jat26ch80jen8"
    },
    "ownerHandle": "chaunceyliu",
    "skill": {
        "_creationTime": 1770289196994,
        "_id": "kd7ffawvyfdjt85f02xcqv79f980j793",
        "badges": [],
        "createdAt": 1770289196994,
        "displayName": "Aiusd Skills",
        "latestVersionId": "k97e2xs9hbj003ed5s3g63x83180pmr3",
        "ownerUserId": "kn77ncj465rvq2n8f53jat26ch80jen8",
        "slug": "aiusd-skills",
        "stats": {
            "comments": 0,
            "downloads": 1424,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Manage AIUSD accounts and trades: check balances, execute buy\/sell\/swap orders, stake\/unstake, withdraw funds, top up gas, and view transaction history.",
        "tags": {
            "latest": "k97e2xs9hbj003ed5s3g63x83180pmr3"
        },
        "updatedAt": 1774322769052
    }
}