65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's described purpose (Binance Convert) is plausible, but the package omits declared credential requirements and instructs storing plaintext secrets in a local file (TOOLS.md), so its operatio...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773892106661,
        "_id": "k9794pdpctpx4vw13n1gdm81gh8377en",
        "changelog": "Initial release of Binance Convert skill.\n\n- Supports Binance Convert API endpoints for querying, quoting, placing, and managing convert trades.\n- Implements secure credential handling: API and secret keys are masked in responses, never shown in full.\n- Requires user confirmation (\"CONFIRM\") before executing mainnet transactions.\n- Allows management of multiple Binance accounts with environment selection.\n- Provides clear instructions on request signing, authentication, and account storage.\n- Returns responses in JSON format for all endpoints.",
        "changelogSource": "user",
        "createdAt": 1773892106661,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "binance-skills-hub",
        "handle": "binance-skills-hub",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/265599625?v=4",
        "kind": "user",
        "linkedUserId": "kn784r7aarcgnbct6j4ss505dh828jff"
    },
    "ownerHandle": "binance-skills-hub",
    "skill": {
        "_creationTime": 1773892106661,
        "_id": "kd7chw9wzpk73ncje7tf8jz1e9837mzv",
        "badges": [],
        "createdAt": 1773892106661,
        "displayName": "Binance Convert",
        "latestVersionId": "k9794pdpctpx4vw13n1gdm81gh8377en",
        "ownerUserId": "kn784r7aarcgnbct6j4ss505dh828jff",
        "slug": "binance-convert",
        "stats": {
            "comments": 0,
            "downloads": 48,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Binance Convert request using the Binance API. Authentication requires API key and secret key.",
        "tags": {
            "latest": "k9794pdpctpx4vw13n1gdm81gh8377en"
        },
        "updatedAt": 1774337650963
    }
}