41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's marketplace functionality is plausible, but the runtime instructions ask the agent to perform on-chain purchases and execute downloaded packages while the skill declares no credentials or ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771097961154,
        "_id": "k9778gh1pezgvcg71dex3s4dad814npq",
        "changelog": "Added permanent re-download (pay once, download forever), purchase history endpoint, calldata verification for secure purchases",
        "changelogSource": "user",
        "createdAt": 1771097961154,
        "version": "1.4.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "sharbel",
        "handle": "sharbelayy",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/79539257?v=4",
        "kind": "user",
        "linkedUserId": "kn76e0bpa52ytnvj2avahsb81580yekr"
    },
    "ownerHandle": "sharbelayy",
    "skill": {
        "_creationTime": 1771092995027,
        "_id": "kd74jazdhgmk9xhesqctn3b2rh815f1q",
        "badges": [],
        "createdAt": 1771092995027,
        "displayName": "Clawmarket",
        "latestVersionId": "k9778gh1pezgvcg71dex3s4dad814npq",
        "ownerUserId": "kn76e0bpa52ytnvj2avahsb81580yekr",
        "slug": "clawmarket",
        "stats": {
            "comments": 0,
            "downloads": 587,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 5
        },
        "summary": "Browse, install, buy, sell, publish, update, and review AI agent skills on ClawMarket, and manage your marketplace profile and wallet.",
        "tags": {
            "latest": "k9778gh1pezgvcg71dex3s4dad814npq"
        },
        "updatedAt": 1774324796670
    }
}