59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement an ApeX trading client (matching its description) but the package/registry metadata omits the fact it requires multiple sensitive credentials — including an Omni seed ph...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770802222638,
        "_id": "k977t890ntcp5qjyfgh685fwp180zbfh",
        "changelog": "- Added trigger phrase guidance for \"submit-reward\", including defaulting to reward ID 300001 if none is provided.\n- Now lists English and Chinese example trigger phrases for OpenClaw enrollment.\n- No changes to core functionality or trading commands.\n- Added .DS_Store in scripts directory (no functional impact).",
        "changelogSource": "user",
        "createdAt": 1770802222638,
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "joshlin111",
        "handle": "joshlin111",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/202062620?v=4",
        "kind": "user",
        "linkedUserId": "kn7ak7gr5jyfcd9qdmndddg7fx80f52s"
    },
    "ownerHandle": "joshlin111",
    "skill": {
        "_creationTime": 1770107587177,
        "_id": "kd72wzyrw03pvszszdf1axgp0980fxct",
        "badges": [],
        "createdAt": 1770107587177,
        "displayName": "Apex Trading & Analysis",
        "latestVersionId": "k977t890ntcp5qjyfgh685fwp180zbfh",
        "ownerUserId": "kn7ak7gr5jyfcd9qdmndddg7fx80f52s",
        "slug": "apex-trading",
        "stats": {
            "comments": 0,
            "downloads": 2716,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 7,
            "versions": 4
        },
        "summary": "Trade and monitor ApeX perpetual futures. Check balances, view positions with P&L, place\/cancel orders, execute market trades, or submit trade reward enrollments. Use when the user asks about ApeX trading, portfolio status, crypto positions, activity enrollments, or wants to execute trades on ApeX.",
        "tags": {
            "latest": "k977t890ntcp5qjyfgh685fwp180zbfh"
        },
        "updatedAt": 1772064935912
    }
}