59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code matches its stated purpose (a Binance DCA tool) but the package metadata and documentation are inconsistent and it gives insecure setup suggestions (e.g., persisting secrets in shell ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770308254920,
        "_id": "k970e7yxyye6tdq6cjjdxj34x580jpy1",
        "changelog": "- Enhanced documentation with a professional overview, strategy guidance, and clear step-by-step setup instructions.\n- Expanded usage examples to cover common DCA scenarios, including detailed output samples.\n- Improved explanation of all script actions, adding argument details, defaults, and security tips.\n- Added sections covering risk management, OpenClaw integration, and best practices for using testnet and API keys.\n- Overall, this is a significant rewrite aimed at clarity, safety, and usability for both beginners and advanced users.",
        "changelogSource": "auto",
        "createdAt": 1770308254920,
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "fpsjago",
        "handle": "fpsjago",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/105124565?v=4",
        "kind": "user",
        "linkedUserId": "kn7ay3s6dke2sgprepyfx4fp8s80jcq1"
    },
    "ownerHandle": "fpsjago",
    "skill": {
        "_creationTime": 1770297981307,
        "_id": "kd73c3fysddzxax9a8ea5eqynh80jvwy",
        "badges": [],
        "createdAt": 1770297981307,
        "displayName": "Binance Dca",
        "latestVersionId": "k970e7yxyye6tdq6cjjdxj34x580jpy1",
        "ownerUserId": "kn7ay3s6dke2sgprepyfx4fp8s80jcq1",
        "slug": "binance-dca",
        "stats": {
            "comments": 0,
            "downloads": 1723,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 1,
            "versions": 5
        },
        "summary": "Professional Binance Dollar-Cost Averaging (DCA) tool for automated and manual recurring crypto purchases. Plan DCA strategies with scenario analysis, execute market\/limit buys, track history, and manage systematic accumulation schedules for any trading pair. Includes risk management, testnet support, and OpenClaw automation integration. Triggers on requests about DCA, recurring buys, cost averaging, accumulation strategies, or Binance spot purchases.",
        "tags": {
            "latest": "k970e7yxyye6tdq6cjjdxj34x580jpy1"
        },
        "updatedAt": 1772249516001
    }
}