41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and runtime instructions diverge in important ways: it stores and can output private keys in plaintext, leaks pack passwords into migration files, and uses environment variables that ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772952660211,
        "_id": "k970bym6693p3y2z1xt3f1412982hsz0",
        "changelog": "✨ Added generate-birth-id.js for birth initialization of new OpenClaw instances. Supports automatic clone detection via IS_CLONE environment variable. Generates unique Birth IDs using Ethereum DID with cryptographic signature verification.",
        "changelogSource": "user",
        "createdAt": 1772952660211,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "vg555558",
        "handle": "vg555558",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/28296982?v=4",
        "kind": "user",
        "linkedUserId": "kn7576qgkzvmnw8t6s0g1rbdah82gh0b"
    },
    "ownerHandle": "vg555558",
    "skill": {
        "_creationTime": 1772939525467,
        "_id": "kd74mr2d3vygqat2sjtpxe3jpd82gdwd",
        "badges": [],
        "createdAt": 1772939525467,
        "displayName": "Birth System Manager",
        "latestVersionId": "k970bym6693p3y2z1xt3f1412982hsz0",
        "ownerUserId": "kn7576qgkzvmnw8t6s0g1rbdah82gh0b",
        "slug": "birth-system-manager",
        "stats": {
            "comments": 0,
            "downloads": 201,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "Manage birth encoding, migration packing\/unpacking, identity whoami, secure wallet decryption, and full family tree lineage tracking for OpenClaw agents with...",
        "tags": {
            "birth": "k970bym6693p3y2z1xt3f1412982hsz0",
            "clones": "k970bym6693p3y2z1xt3f1412982hsz0",
            "cloning": "k970bym6693p3y2z1xt3f1412982hsz0",
            "did": "k970bym6693p3y2z1xt3f1412982hsz0",
            "ethereum": "k970bym6693p3y2z1xt3f1412982hsz0",
            "family-tree": "k970bym6693p3y2z1xt3f1412982hsz0",
            "fix": "k970bym6693p3y2z1xt3f1412982hsz0",
            "generations": "k970bym6693p3y2z1xt3f1412982hsz0",
            "identity": "k970bym6693p3y2z1xt3f1412982hsz0",
            "init": "k970bym6693p3y2z1xt3f1412982hsz0",
            "initialization": "k970bym6693p3y2z1xt3f1412982hsz0",
            "latest": "k970bym6693p3y2z1xt3f1412982hsz0",
            "lineage": "k970bym6693p3y2z1xt3f1412982hsz0",
            "migration": "k9732xcekc9nxm32wxdg5g8ppx82h96v",
            "wallet": "k970bym6693p3y2z1xt3f1412982hsz0"
        },
        "updatedAt": 1774330494056
    }
}