56/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： clean

OpenClaw： suspicious

The skill is a reasonable wrapper around the @bifrostio/slpx-cli tool, but there are inconsistencies (notably a README instruction to set a private-key env var that the skill metadata does not declare...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774521061604,
        "_id": "k974wcqzejb59p072rxw5wmvcn83mcr1",
        "changelog": "Version 0.1.3\n\n- Updated metadata version to 0.1.3.\n- Clarified that the signing key for transactions should already be configured (removed raw key handling in skill instructions).\n- Simplified broadcast and wallet context rules—no more `--dry-run`\/address handling for execution, always use the configured signing wallet for mint\/redeem\/claim.\n- Streamlined checklist step: now report findings and wait for user approval before broadcast, without explicit `--dry-run`.\n- Naming in references: changed \"BIFROST_SKILL_PRIVATEKEY\" to \"signing key\" in several places for clarity.\n- Cleanup in skill wording and minor workflow clarifications.",
        "changelogSource": "user",
        "createdAt": 1774521061604,
        "version": "0.1.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s173ab7ztfmvz2zwe4znjfe5r583kkfe",
        "displayName": "Bifrost",
        "handle": "bifrost-io",
        "kind": "org"
    },
    "ownerHandle": "bifrost-io",
    "skill": {
        "_creationTime": 1774407996496,
        "_id": "kd7a297n7szffb15bmbb574h0s83j21z",
        "badges": [],
        "createdAt": 1774407996496,
        "displayName": "Bifrost Slpx skills",
        "latestVersionId": "k974wcqzejb59p072rxw5wmvcn83mcr1",
        "ownerPublisherId": "s173ab7ztfmvz2zwe4znjfe5r583kkfe",
        "ownerUserId": "kn702013d35c0c4hgryz3aqhms83jg4d",
        "slug": "bifrost-slpx",
        "stats": {
            "comments": 0,
            "downloads": 48,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Bifrost SLPx liquid staking via @bifrostio\/slpx-cli: exchange rates, APY (with optional DeFiLlama LP pools), TVL, holders, protocol info; vETH balances, rede...",
        "tags": {
            "latest": "k974wcqzejb59p072rxw5wmvcn83mcr1"
        },
        "updatedAt": 1774529218665
    }
}