41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The SKILL.md describes a charting module but the package contains no code; it also includes a hard-coded Telegram recipient which could cause unintended data exfiltration — the pieces are inconsistent...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771531540860,
        "_id": "k973z07k4ktsb8jh80pzedhfv581eh5h",
        "changelog": "- Added _meta.json file to the skill.\n- Version bump to 1.1.0; no changes to code or documentation logic.\n- No impact to chart generation features or user workflow.",
        "changelogSource": "auto",
        "createdAt": 1771531540860,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ryandeangraves",
        "handle": "ryandeangraves",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/209055942?v=4",
        "kind": "user",
        "linkedUserId": "kn79rnzthjj7sjw355h0005fe181frrz"
    },
    "ownerHandle": "ryandeangraves",
    "skill": {
        "_creationTime": 1771527771953,
        "_id": "kd798fadhm9pa1j3zekr80k3p581fy7s",
        "badges": [],
        "createdAt": 1771527771953,
        "displayName": "Charts",
        "latestVersionId": "k973z07k4ktsb8jh80pzedhfv581eh5h",
        "ownerUserId": "kn79rnzthjj7sjw355h0005fe181frrz",
        "slug": "charts",
        "stats": {
            "comments": 0,
            "downloads": 826,
            "installsAllTime": 13,
            "installsCurrent": 12,
            "stars": 0,
            "versions": 2
        },
        "summary": "Generate 90-day candlestick charts with SMA 20\/50, RSI, Fibonacci retracements, and pattern detection for BTC, ETH, XRP, SUI, Gold, and Silver.",
        "tags": {
            "latest": "k973z07k4ktsb8jh80pzedhfv581eh5h"
        },
        "updatedAt": 1774325825035
    }
}