59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement ChangeNOW swaps and embeds an affiliate link, but there are mismatches between metadata, runtime instructions, and the code (notably around where the API key lives) and ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769595048699,
        "_id": "k971a2mexb1ajzaw2zrm1rpbn1803c85",
        "changelog": "ChangeNOW Earner Skill v1.0.0\n\n- Introduced instant crypto swapping via the ChangeNOW API with affiliate earnings on every transaction.\n- Added command-line scripts to perform swaps and estimate exchange rates between supported coins.\n- Enabled configuration of ChangeNOW Affiliate API Key and Partner Link ID for commission tracking.\n- Supports 900+ crypto assets, including HBAR, HYPE, BTC, ETH, USDT, and USDC.",
        "changelogSource": "auto",
        "createdAt": 1769595048699,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "yakelb0815",
        "handle": "yakelb0815",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/209450754?v=4",
        "kind": "user",
        "linkedUserId": "kn7a06x0gfrhthxkm5g15msn8h8030a4"
    },
    "ownerHandle": "yakelb0815",
    "skill": {
        "_creationTime": 1769595048699,
        "_id": "kd76nttyjg54x9wdfyv0jxhr6n802bg4",
        "badges": [],
        "createdAt": 1769595048699,
        "displayName": "Changenow",
        "latestVersionId": "k971a2mexb1ajzaw2zrm1rpbn1803c85",
        "ownerUserId": "kn7a06x0gfrhthxkm5g15msn8h8030a4",
        "slug": "changenow",
        "stats": {
            "comments": 0,
            "downloads": 1563,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Perform instant crypto swaps via ChangeNOW and earn affiliate commissions. Use when someone wants to swap tokens (e.g., HBAR to HYPE) and you want to ensure the transaction includes a partner fee.",
        "tags": {
            "latest": "k971a2mexb1ajzaw2zrm1rpbn1803c85"
        },
        "updatedAt": 1772161896633
    }
}