41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally implements an on‑device EVM wallet onboarding flow that matches its description, but it contains several risky or inconsistent behaviors (remote installer via curl|bash, plaintext ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770313618250,
        "_id": "k97861m24rba773e8p8pnmcwen80jnxx",
        "changelog": "- Introduced the clawcast skill for managing EVM wallets and transactions using cast, with step-by-step onboarding and clearer user guidance.\n- Added detailed step scripts for onboarding: install, wallet creation\/import, password, network and token selection, and summary.\n- Enhanced automatic wallet readiness and status checks on each session, showing address, balance, and network details if a wallet is present.\n- Improved onboarding flow: simple language, one question at a time, explicit confirmation, and prevents skipping steps or inventing user input.\n- New transaction mention logging to keep a record of discussed transactions for later reference.\n- Updated resources include authoritative EVM network and token metadata files for accurate recommendations and validations.",
        "changelogSource": "auto",
        "createdAt": 1770313618250,
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "te_za",
        "handle": "tezatezaz",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/112280042?v=4",
        "kind": "user",
        "linkedUserId": "kn77dev4qh3c49qwdg94m48sk580ahja"
    },
    "ownerHandle": "tezatezaz",
    "skill": {
        "_creationTime": 1770313618250,
        "_id": "kd7cmr7nrre1pxdwwh2998htss80kx88",
        "badges": [],
        "createdAt": 1770313618250,
        "displayName": "Cast",
        "latestVersionId": "k97861m24rba773e8p8pnmcwen80jnxx",
        "ownerUserId": "kn77dev4qh3c49qwdg94m48sk580ahja",
        "slug": "cast",
        "stats": {
            "comments": 0,
            "downloads": 1111,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Skill for managing EVM wallets, transactions, and network helpers via cast; covers onboarding, checks, and operating procedures.",
        "tags": {
            "latest": "k97861m24rba773e8p8pnmcwen80jnxx"
        },
        "updatedAt": 1774322837687
    }
}