41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match its stated purpose (checking wallets) but they tell the agent to fetch-and-run an npm package via npx at runtime and to query locally stored Turnkey credentials (wallet ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772360006710,
        "_id": "k9712pjc8hsangnr1m3xt8m4pd822d01",
        "changelog": "check-wallet v0.1.0\n\n- Initial release for querying wallet addresses and on-chain balances on OpenAnt.\n- Supports checking SOL, ETH, token (USDC) balances, and listing wallet addresses via CLI.\n- Handles wallet status checks and error cases (e.g., not authenticated, insufficient balance).\n- All commands are read-only and do not require user confirmation.\n- Includes options for custom Solana\/EVM RPC endpoints for balance queries.",
        "changelogSource": "auto",
        "createdAt": 1772360006710,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ant-1984",
        "handle": "ant-1984",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/261687401?v=4",
        "kind": "user",
        "linkedUserId": "kn7ee6cyxgv6edxyqthzm98fnn823d46"
    },
    "ownerHandle": "ant-1984",
    "skill": {
        "_creationTime": 1772360006710,
        "_id": "kd741jpqk5n1h0ycyqndbesj2s822q1s",
        "badges": [],
        "createdAt": 1772360006710,
        "displayName": "Check Wallet",
        "latestVersionId": "k9712pjc8hsangnr1m3xt8m4pd822d01",
        "ownerUserId": "kn7ee6cyxgv6edxyqthzm98fnn823d46",
        "slug": "check-wallet",
        "stats": {
            "comments": 0,
            "downloads": 236,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Query wallet addresses and on-chain balances on OpenAnt. Use when the agent or user wants to check wallet address, view balance, see how much SOL or ETH they...",
        "tags": {
            "latest": "k9712pjc8hsangnr1m3xt8m4pd822d01"
        },
        "updatedAt": 1774328104269
    }
}