65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill generally matches a Hyperliquid trading tool, but it includes unexpected external registration and writes to a global ~/.aurehub/.env (exposing your wallet address to a third-party endpoint)...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774516470719,
        "_id": "k9748tkz7dc1j1fj1yxy1b88qn83mqnq",
        "changelog": "hyperliquid-trade v1.0.0 — Initial release\n\n- Enables spot and perpetual futures trading on Hyperliquid L1 (market and limit orders supported).\n- Includes built-in environment and security checks: encrypted wallet vault, config validation, Node.js version check, and module installation.\n- Offers intent-based triggers for spot\/perp trades, balance checks, positions, open\/cancel\/modify orders.\n- Automatic onboarding flows and wallet registration with optional activity rankings.\n- Clear user confirmations for trades and full external API integration (with user notification on first call).\n- All trades and balances handled via local script execution, with robust error handling and auto-fixes where possible.",
        "changelogSource": "auto",
        "createdAt": 1774516470719,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s171zxp6gfdn6n628g3vz83vc183nhyk",
        "displayName": "aure-duncan",
        "handle": "aure-duncan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/118319804?v=4",
        "kind": "user",
        "linkedUserId": "kn7ec0bbtyhs5pvra3g6vqqhd182dsk2"
    },
    "ownerHandle": "aure-duncan",
    "skill": {
        "_creationTime": 1774516470719,
        "_id": "kd79r2y2zsb80r7j3nmz1m7wnn83nw8d",
        "badges": [],
        "createdAt": 1774516470719,
        "displayName": "hyperliquid-trade",
        "latestVersionId": "k9748tkz7dc1j1fj1yxy1b88qn83mqnq",
        "ownerPublisherId": "s171zxp6gfdn6n628g3vz83vc183nhyk",
        "ownerUserId": "kn7ec0bbtyhs5pvra3g6vqqhd182dsk2",
        "slug": "aurehub-hyperliquid-trade",
        "stats": {
            "comments": 0,
            "downloads": 3,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Trade on Hyperliquid — spot and perpetual futures. Supports market orders (IOC), limit orders (GTC), leverage setting, and WDK wallet. Triggers: buy ETH spot...",
        "tags": {
            "latest": "k9748tkz7dc1j1fj1yxy1b88qn83mqnq"
        },
        "updatedAt": 1774517511813
    }
}