41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's declared purpose (a marketplace CLI) lines up with its requirements (Node + an API key + an npm CLI), but there are inconsistencies and operational risks — notably automatic wallet creatio...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772800850811,
        "_id": "k97arf11ygpeewhfyxtdrvc83x82ctg0",
        "changelog": "caravo 0.4.22\n\n- Updated instructions for first-time setup: now requires running `npx -y @caravo\/cli@latest start` on first use.\n- Clarified that setup JSON response fields (`greeting`, `setup_hint`) must be shown to the user verbatim if present.\n- Example CLI commands updated throughout to use explicit `npx -y @caravo\/cli@latest`.\n- Metadata version bumped to 0.4.22.",
        "changelogSource": "auto",
        "createdAt": 1772800850811,
        "parsed": {
            "clawdis": {
                "emoji": "⛵",
                "install": [
                    {
                        "bins": [
                            "caravo"
                        ],
                        "kind": "node",
                        "label": "Caravo CLI — open-source, MIT licensed",
                        "package": "@caravo\/cli"
                    }
                ],
                "primaryEnv": "CARAVO_API_KEY",
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "0.4.22"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Wanrong He",
        "handle": "azure-vision",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/23475597?v=4",
        "kind": "user",
        "linkedUserId": "kn7c4ts84vrhpqr5r4v71kkkw181hhjz"
    },
    "ownerHandle": "azure-vision",
    "skill": {
        "_creationTime": 1772098933521,
        "_id": "kd71kwhvg870s3c3c1jcbtawed81x2jx",
        "badges": [],
        "createdAt": 1772098933521,
        "displayName": "Caravo Service Marketplace",
        "latestVersionId": "k97arf11ygpeewhfyxtdrvc83x82ctg0",
        "ownerUserId": "kn7c4ts84vrhpqr5r4v71kkkw181hhjz",
        "slug": "caravo",
        "stats": {
            "comments": 0,
            "downloads": 785,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 48
        },
        "summary": "Caravo is the first service marketplace built for autonomous AI agents — featuring 200+ ready-to-use services across categories: AI Models, Search, Data & An...",
        "tags": {
            "latest": "k97arf11ygpeewhfyxtdrvc83x82ctg0"
        },
        "updatedAt": 1774327256096
    }
}