59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's declared metadata omits sensitive runtime requirements while the instructions tell agents to fetch and run remote npm code, hold a spendable wallet, and send arbitrary email — a high-privi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771519557476,
        "_id": "k971kx5ggjj6t345a394z5twa981ft6y",
        "changelog": "Initial release of atxp: Agent wallet, identity, and paid AI tools in one package.\n\n- Register agents and fund wallets via Stripe or USDC.\n- Integrated tools: web search, AI image\/video\/music generation, LLM gateway, X\/Twitter search, email send\/receive.\n- Agent gets a unique email address and wallet for autonomous paid API access.\n- Security-first design: strict rules for handling untrusted data and credential protection.\n- Compatible with Node.js ≥18 via npx; config and credentials are isolated to user profile.",
        "changelogSource": "auto",
        "createdAt": 1771519557476,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "R-M-Naveen",
        "handle": "r-m-naveen",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/243160589?v=4",
        "kind": "user",
        "linkedUserId": "kn7atzctzpz00gkhr3s6rxr77581ep8c"
    },
    "ownerHandle": "r-m-naveen",
    "skill": {
        "_creationTime": 1771519557476,
        "_id": "kd7aabsdw7t9hw008gbha9fmns81fsf9",
        "badges": [],
        "createdAt": 1771519557476,
        "displayName": "Atxp",
        "latestVersionId": "k971kx5ggjj6t345a394z5twa981ft6y",
        "ownerUserId": "kn7atzctzpz00gkhr3s6rxr77581ep8c",
        "slug": "atxp-2",
        "stats": {
            "comments": 0,
            "downloads": 1480,
            "installsAllTime": 4,
            "installsCurrent": 3,
            "stars": 1,
            "versions": 1
        },
        "summary": "Agent wallet, identity, and paid tools in one package. Register an agent, fund it via Stripe or USDC, then use the balance for web search, AI image generatio...",
        "tags": {
            "latest": "k971kx5ggjj6t345a394z5twa981ft6y"
        },
        "updatedAt": 1772064341505
    }
}