41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's files and runtime steps match its stated purpose, but important inconsistencies and risky behaviors (un-encrypted backups to IPFS and automated npx execution of remote packages) make it wo...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772045060857,
        "_id": "k97e0d6jxsmm2am8vwmgarqsyh81vraz",
        "changelog": "Initial release of archon-cashu: DID-integrated Cashu ecash skill.\n\n- Integrates Cashu ecash token operations with Archon DID for P2PK-locked (public key-locked) tokens.\n- Supports sending and receiving sats using DID-derived public keys, enabling DID-locked payments.\n- Provides wallet backup to vault and Nostr npub.cash integration for zaps.\n- Includes scripts for minting, locking\/unlocking, sending (standard and DID-locked), and wallet management.\n- Requires Archon config, passphrase, and Cashu setup; supports LNBITS integration as optional feature.",
        "changelogSource": "auto",
        "createdAt": 1772045060857,
        "parsed": {
            "clawdis": {
                "emoji": "🥜",
                "primaryEnv": "ARCHON_CASHU_CONFIG",
                "requires": {
                    "anyBins": [
                        "curl",
                        "jq"
                    ],
                    "bins": [
                        "node",
                        "npx",
                        "cashu"
                    ],
                    "env": [
                        "ARCHON_WALLET_PATH",
                        "ARCHON_PASSPHRASE",
                        "ARCHON_CASHU_CONFIG"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "macterra",
        "handle": "macterra",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/434644?v=4",
        "kind": "user",
        "linkedUserId": "kn70s0ypb4q82sr9ax06170yv180fa2k"
    },
    "ownerHandle": "macterra",
    "skill": {
        "_creationTime": 1772045060857,
        "_id": "kd79egzffh0gg54apwvc68t93d81vebt",
        "badges": [],
        "createdAt": 1772045060857,
        "displayName": "Archon Cashu",
        "latestVersionId": "k97e0d6jxsmm2am8vwmgarqsyh81vraz",
        "ownerUserId": "kn70s0ypb4q82sr9ax06170yv180fa2k",
        "slug": "archon-cashu",
        "stats": {
            "comments": 0,
            "downloads": 301,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Cashu ecash operations integrated with Archon DID for P2PK-locked tokens. Send and receive sats using DID-derived pubkeys, backup wallets to vault. Use for C...",
        "tags": {
            "latest": "k97e0d6jxsmm2am8vwmgarqsyh81vraz"
        },
        "updatedAt": 1774327120234
    }
}