55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and instructions match its claimed Cesto functionality, but a prompt-injection pattern was detected in SKILL.md and the skill writes/encodes authentication tokens to disk with only we...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774642262170,
        "_id": "k97eafj2knnp7v0g0hqd2ch3wx83qfnm",
        "changelog": "Cesto Toolkit 1.0.0 — initial release\n\n- Provides a complete toolkit to interact with the Cesto platform, covering all public and authenticated API features.\n- Supports viewing and analyzing all baskets, basket details, token analytics, and cross-basket performance.\n- Enables basket creation and historical portfolio simulation (requires login).\n- Includes step-by-step, conversational user flows for all features, ensuring clear guidance and data presentation.\n- Uses bundled scripts for efficient API handling with minimal user approval for each request.",
        "changelogSource": "user",
        "createdAt": 1774642262170,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1745fcdsaepx4dgcayqtq72as83mwnj",
        "displayName": "Lakshya Garg",
        "handle": "lakshyagarg26",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/81349831?v=4",
        "kind": "user",
        "linkedUserId": "kn7dcndyp6fv2rznpfwgfsbynn83myk1"
    },
    "ownerHandle": "lakshyagarg26",
    "skill": {
        "_creationTime": 1774642262170,
        "_id": "kd78a74hknpfgm4raghtv54hp983q2pv",
        "badges": [],
        "createdAt": 1774642262170,
        "displayName": "cesto-toolkit",
        "latestVersionId": "k97eafj2knnp7v0g0hqd2ch3wx83qfnm",
        "ownerPublisherId": "s1745fcdsaepx4dgcayqtq72as83mwnj",
        "ownerUserId": "kn7dcndyp6fv2rznpfwgfsbynn83myk1",
        "slug": "cesto-toolkit",
        "stats": {
            "comments": 0,
            "downloads": 19,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Complete toolkit for the Cesto platform — covers all APIs, basket creation, portfolio simulation, and market data. Use this skill whenever the user wants to...",
        "tags": {
            "latest": "k97eafj2knnp7v0g0hqd2ch3wx83qfnm"
        },
        "updatedAt": 1774643807838
    }
}