41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated functionality (paying for API data) is plausible, but the runtime instructions expect downloading and executing an npm CLI (via npx) and reference Coinbase wallet secrets that are n...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772809110505,
        "_id": "k9700pq191httzkjydwdmwe65h82d2ej",
        "changelog": "Re-publish — fix stuck security scan",
        "changelogSource": "user",
        "createdAt": 1772809110505,
        "parsed": {
            "clawdis": {
                "emoji": "⚡",
                "install": [
                    {
                        "id": "boltzpay-cli",
                        "kind": "node",
                        "label": "BoltzPay CLI"
                    }
                ],
                "requires": {
                    "bins": [
                        "npx"
                    ]
                }
            }
        },
        "version": "0.1.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "leventilo",
        "handle": "leventilo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/220921133?v=4",
        "kind": "user",
        "linkedUserId": "kn7d4rwsrhtf727hscc80cqg6181jys4"
    },
    "ownerHandle": "leventilo",
    "skill": {
        "_creationTime": 1771714472963,
        "_id": "kd73hnf62wahv9a0tmbtdnb9h581kk09",
        "badges": [],
        "createdAt": 1771714472963,
        "displayName": "BoltzPay",
        "latestVersionId": "k9700pq191httzkjydwdmwe65h82d2ej",
        "ownerUserId": "kn7d4rwsrhtf727hscc80cqg6181jys4",
        "slug": "boltzpay",
        "stats": {
            "comments": 0,
            "downloads": 211,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Pay for API data automatically — multi-protocol (x402 + L402), multi-chain",
        "tags": {
            "latest": "k9700pq191httzkjydwdmwe65h82d2ej"
        },
        "updatedAt": 1774326196193
    }
}