47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's purpose (a pay-per-call gateway) matches its declared install and metadata, but it creates/stores a wallet private key that can spend on-chain USDC and relies on an npm package (clawxpay-j...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773239330879,
        "_id": "k97am97v5cyvm3eq38gmx2w7rd82q404",
        "changelog": "No changes detected in this version.\n\n- Version 1.0.3 has no updates or modifications from the previous release.",
        "changelogSource": "user",
        "createdAt": 1773239330879,
        "parsed": {
            "clawdis": {
                "emoji": "💳",
                "homepage": "https:\/\/clawxpay.com",
                "install": [
                    {
                        "bins": [
                            "clawxpay-init"
                        ],
                        "kind": "node",
                        "package": "clawxpay-js"
                    }
                ]
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "clawxpay",
        "handle": "biggggtreee-rgb",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/226099326?v=4",
        "kind": "user",
        "linkedUserId": "kn73e3s645ja2t37e6w6db64q982mzzc"
    },
    "ownerHandle": "biggggtreee-rgb",
    "skill": {
        "_creationTime": 1773149514127,
        "_id": "kd7ageqb8r1vhh8tfqdnnnr57982np6a",
        "badges": [],
        "createdAt": 1773149514127,
        "displayName": "clawxpay",
        "latestVersionId": "k97am97v5cyvm3eq38gmx2w7rd82q404",
        "ownerUserId": "kn73e3s645ja2t37e6w6db64q982mzzc",
        "slug": "clawxpay",
        "stats": {
            "comments": 0,
            "downloads": 199,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "Pay-per-call API gateway — zero account, zero API key, zero subscription via the x402 protocol. One Base wallet + USDC is all you need to access 250+ profess...",
        "tags": {
            "latest": "k97am97v5cyvm3eq38gmx2w7rd82q404"
        },
        "updatedAt": 1774331398024
    }
}