47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's instructions generally match a DeFi execution tool, but there are several provenance, key-management, and install-supply-chain concerns (no source/homepage, reliance on npx for a CLI that ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774713352851,
        "_id": "k972d2pbb0svvksadq6y0vy9mh83r9kq",
        "changelog": "**ChainStream DeFi v1.1.1 Changelog**\n\n- Removed bridge functionality; now focuses on swap, launchpad, transaction signing, and broadcast.\n- Required pre-swap security check using chainstream-data's token scanner.\n- New atomic step-by-step protocol for all destructive operations: route, confirm, sign, broadcast, poll.\n- Updated CLI\/MCP endpoints for explicit transaction build, sign, and broadcast stages.\n- Added mandatory presentation of transaction details before signature.\n- Documentation and references updated and simplified to reflect changes; bridge-protocol reference removed.",
        "changelogSource": "auto",
        "createdAt": 1774713352851,
        "version": "1.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1763qs0j2b2kgwgxyz797x2qh83kfzt",
        "displayName": "ChainStream",
        "handle": "harry5556",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/199374592?v=4",
        "kind": "user",
        "linkedUserId": "kn7d949m4x7mzbj75gh32fna0x832bb6"
    },
    "ownerHandle": "harry5556",
    "skill": {
        "_creationTime": 1773917251471,
        "_id": "kd7cxpqbbrn8d81g9fdxq9zncs837r4q",
        "badges": [],
        "createdAt": 1773917251471,
        "displayName": "Chainstream Defi",
        "latestVersionId": "k972d2pbb0svvksadq6y0vy9mh83r9kq",
        "ownerPublisherId": "s1763qs0j2b2kgwgxyz797x2qh83kfzt",
        "ownerUserId": "kn7d949m4x7mzbj75gh32fna0x832bb6",
        "slug": "chainstream-defi",
        "stats": {
            "comments": 0,
            "downloads": 135,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 11
        },
        "summary": "[FINANCIAL EXECUTION] Execute irreversible on-chain DeFi operations via CLI and MCP tools. Use when user wants to swap tokens, create tokens on launchpad, si...",
        "tags": {
            "bridge": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "crypto": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "defi": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "ethereum": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "latest": "k972d2pbb0svvksadq6y0vy9mh83r9kq",
            "solana": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "swap": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "trading": "k975yft82a8j4ccsk0r00gpn4x83bt02",
            "x402": "k975yft82a8j4ccsk0r00gpn4x83bt02"
        },
        "updatedAt": 1774770470118
    }
}