41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (scanning EVM contracts) matches its instructions, but the runtime instructions ask you to fetch and execute code from a GitHub repo, run a persistent background monitor, an...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770291981409,
        "_id": "k97f1tjgeqytsgsjv5sxfk464980j5e3",
        "changelog": "Initial release of BYOCB ArbInjectionSkill:\n\n- Scans EVM smart contracts for arbitrary call injection vulnerabilities.\n- Monitors multiple blockchains in real-time for new contract deployments.\n- Supports on-demand scanning of specific addresses.\n- Saves findings with risk verdicts (CRITICAL, HIGH, MEDIUM, LOW\/SAFE) and detailed reports.\n- Provides guidance for alerting users and avoiding false positives.\n- Includes scheduled update recommendations and environment variable support.",
        "changelogSource": "auto",
        "createdAt": 1770291981409,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "CryptoToolDev",
        "handle": "cryptotooldev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/131488347?v=4",
        "kind": "user",
        "linkedUserId": "kn7ew3hfahvmq9tqhvqt5avzen80jga2"
    },
    "ownerHandle": "cryptotooldev",
    "skill": {
        "_creationTime": 1770291981409,
        "_id": "kd721sns8tv9mccq1rq6zz5tyd80kcsv",
        "badges": [],
        "canonicalSkillId": "kd7eh2c46xwqyb0p7zwmcntgen80jgn3",
        "createdAt": 1770291981409,
        "displayName": "BYOCB ArbInjectionSkill",
        "forkOf": {
            "at": 1770291981409,
            "kind": "duplicate",
            "skillId": "kd7eh2c46xwqyb0p7zwmcntgen80jgn3"
        },
        "latestVersionId": "k97f1tjgeqytsgsjv5sxfk464980j5e3",
        "ownerUserId": "kn7ew3hfahvmq9tqhvqt5avzen80jga2",
        "slug": "arbinjectionskill",
        "stats": {
            "comments": 0,
            "downloads": 1150,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "BYOCB ArbInjectionSkill: Scan EVM smart contracts for arbitrary call injection vulnerabilities. Monitor chains in real-time or scan specific addresses.",
        "tags": {
            "latest": "k97f1tjgeqytsgsjv5sxfk464980j5e3"
        },
        "updatedAt": 1774322778750
    }
}