41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement a congressional-trade mirroring bot that needs E*TRADE credentials and will install/run locally, but there are packaging/metadata inconsistencies and persistent-install ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771708019811,
        "_id": "k975kqtby9yr2mcb989qqw0q0581k07t",
        "changelog": "### Clawback 1.1.1 Changelog\n\n- Added utilities and tests for E*TRADE authentication (auth scripts, test cases, and improved credential handling)\n- Enhanced project documentation with summaries, daily maintenance logs, and improvement reports\n- Updated CLI and wrapper logic to simplify command execution (all primary commands now route through bin\/clawback.py)\n- Improved troubleshooting section in SKILL.md, covering common issues and token refresh\/reset flows\n- Refined setup and configuration scripts for better error handling and environment detection",
        "changelogSource": "auto",
        "createdAt": 1771708019811,
        "parsed": {
            "clawdis": {
                "emoji": "🦀",
                "primaryEnv": "BROKER_API_KEY",
                "requires": {
                    "bins": [
                        "python3",
                        "pip"
                    ]
                }
            }
        },
        "version": "1.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "mainfraame",
        "handle": "mainfraame",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5190439?v=4",
        "kind": "user",
        "linkedUserId": "kn70236x6f7m8v4vjer2dgg70h80bbeq"
    },
    "ownerHandle": "mainfraame",
    "skill": {
        "_creationTime": 1769915403397,
        "_id": "kd7362fzb9gr3n5g0wr8734vt580btxr",
        "badges": [],
        "createdAt": 1769915403397,
        "displayName": "Clawback",
        "latestVersionId": "k975kqtby9yr2mcb989qqw0q0581k07t",
        "ownerUserId": "kn70236x6f7m8v4vjer2dgg70h80bbeq",
        "slug": "clawback",
        "stats": {
            "comments": 0,
            "downloads": 3377,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 0,
            "versions": 18
        },
        "summary": "Mirror congressional stock trades with automated broker execution and risk management. Use when you want to track and automatically trade based on congressio...",
        "tags": {
            "latest": "k975kqtby9yr2mcb989qqw0q0581k07t"
        },
        "updatedAt": 1774321984450
    }
}