41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill asks users to provide a private key and then dynamically downloads and runs an unvetted npm package (via npx) but the registry metadata claims no credentials or install requirements — this m...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769695712149,
        "_id": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
        "changelog": "Alpha Finder 1.0.0 – Initial release\n\n- Provides market intelligence on Polymarket, Kalshi, and traditional sources.\n- Supports research, probability assessments, market sentiment, and arbitrage opportunity detection.\n- Charges $0.03 USDC per request via x402 protocol on Base network.\n- Integrates web, GitHub, Reddit, and X\/Twitter for comprehensive analysis.\n- Features AI-powered insights, error handling, and multi-method private key configuration.\n- Use cases include trading, research, due diligence, portfolio tracking, and news impact analysis.",
        "changelogSource": "user",
        "createdAt": 1769695712149,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "TzannetosGiannis",
        "handle": "tzannetosgiannis",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32258946?v=4",
        "kind": "user",
        "linkedUserId": "kn71zg947kmtxy0rxk0qxqt7zx804x0t"
    },
    "ownerHandle": "tzannetosgiannis",
    "skill": {
        "_creationTime": 1769695712149,
        "_id": "kd7fj1639hx4pvrfwwdf6f54hs805v6w",
        "badges": [],
        "createdAt": 1769695712149,
        "displayName": "Alpha Finder (x402)",
        "latestVersionId": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
        "ownerUserId": "kn71zg947kmtxy0rxk0qxqt7zx804x0t",
        "slug": "alpha-finder",
        "stats": {
            "comments": 0,
            "downloads": 2185,
            "installsAllTime": 8,
            "installsCurrent": 7,
            "stars": 0,
            "versions": 1
        },
        "summary": "Market Oracle for prediction market intelligence - Polymarket and Kalshi research, probability assessments, market sentiment analysis, and arbitrage opportunity identification. Use when users want to research prediction markets, analyze betting odds, or find market inefficiencies. Costs $0.03 USDC per request via x402 protocol on Base network.",
        "tags": {
            "arbitrage": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "finance": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "kalshi": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "latest": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "market-intelligence": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "polymarket": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "prediction-markets": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "trading": "k9796fchyng7bq5qp5ya6k0qa5804z6x",
            "x402": "k9796fchyng7bq5qp5ya6k0qa5804z6x"
        },
        "updatedAt": 1774321752796
    }
}