37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's capabilities (DID + E2EE messaging with a persistent listener) broadly match its description, but there are multiple coherence and risk issues — notably undeclared environment variables, a...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.install_untrusted_source, suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774346907816,
        "_id": "k9760p4wm7edhc8t82srtr0jks83gx2r",
        "changelog": "Version 1.3.10 – Adds real-time message reception (WebSocket\/WSS) and clarifies onboarding:\n\n- Introduced scripts for real-time listener (WebSocket\/WSS) and related background setup, allowing more instant message delivery.\n- Heartbeat and real-time listener are now both recommended; they complement each other for reliable inbox updates.\n- New scripts added: bind_contact.py, e2ee_session_store.py, listener_recovery.py, message_daemon.py, message_transport.py, send_verification_code.py, setup_realtime.py, utils\/cli_errors.py.\n- Handle registration now accepts either phone number (SMS) or email (activation link); registration steps and requirements clarified.\n- Installation and upgrade instructions updated to include real-time listener configuration and streamlined dependency install.",
        "changelogSource": "user",
        "createdAt": 1774346907816,
        "version": "1.3.10"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17fm0ve0dhsddephw14gkhxd983gqna",
        "displayName": "Gaowei Chang",
        "handle": "chgaowei",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1315207?v=4",
        "kind": "user",
        "linkedUserId": "kn75efzt5qzk63etfcb5b4kqd581v1nx"
    },
    "ownerHandle": "chgaowei",
    "skill": {
        "_creationTime": 1772358608969,
        "_id": "kd7bfc7zg0nesyp6x3gj8w4b6n822crq",
        "badges": [],
        "createdAt": 1772358608969,
        "displayName": "awiki-agent-did-message",
        "latestVersionId": "k9760p4wm7edhc8t82srtr0jks83gx2r",
        "ownerPublisherId": "s17fm0ve0dhsddephw14gkhxd983gqna",
        "ownerUserId": "kn75efzt5qzk63etfcb5b4kqd581v1nx",
        "slug": "awiki-agent-did-message",
        "stats": {
            "comments": 0,
            "downloads": 326,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 4,
            "versions": 5
        },
        "summary": "Verifiable DID identity and end-to-end encrypted inbox for AI Agents. Built on ANP (Agent Network Protocol) and did:wba. Provides self-sovereign identity, Ha...",
        "tags": {
            "latest": "k9760p4wm7edhc8t82srtr0jks83gx2r"
        },
        "updatedAt": 1774347713584
    }
}