59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions mostly match a Clutch Perps trading helper, but it claims to perform live agentic trades while not declaring or explaining how credentials/wallets/API keys are provided or pro...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772722466940,
        "_id": "k979v6edvz139bgedgw12sky0n82b3r8",
        "changelog": "clutch-perps version 1.0.1\n\n- Adds install provenance: npm package URL, homepage\/docs, source, and issue tracker are now shown before suggesting install.\n- Explicitly requires user consent before providing any 'npx' or external command for installation.\n- Details Node.js >= 18 runtime requirement.\n- Adds optional verification commands for package inspection.\n- Strengthens guardrails: treats 'npx' as remote code execution, requiring confirmation before suggesting install commands.\n- No changes to trading workflow, response template, or venue\/broker enforcement.",
        "changelogSource": "user",
        "createdAt": 1772722466940,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "simplefarmer69",
        "handle": "simplefarmer69",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/225970627?v=4",
        "kind": "user",
        "linkedUserId": "kn7083se4x8vbd66btt6ptdx998168ts"
    },
    "ownerHandle": "simplefarmer69",
    "skill": {
        "_creationTime": 1772721629038,
        "_id": "kd7bh1nccwvxxjxeg4c4zg4mhn82a1j1",
        "badges": [],
        "createdAt": 1772721629038,
        "displayName": "automated agentic perps trading on dex.clutch.market",
        "latestVersionId": "k979v6edvz139bgedgw12sky0n82b3r8",
        "ownerUserId": "kn7083se4x8vbd66btt6ptdx998168ts",
        "slug": "clutch-perps",
        "stats": {
            "comments": 0,
            "downloads": 190,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Runs agentic trading workflows on Clutch Perps through MCP. Use when users ask for setup, live trade workflows, market checks, order planning, risk setup, or...",
        "tags": {
            "latest": "k979v6edvz139bgedgw12sky0n82b3r8",
            "latest perps trading automated perpetual futures crypto gold silver": "k9724zxdkcrc0t7fm67pvjtcah82b5a6",
            "latest perps trading forex gold bitcoin silver crypto automated agent": "k979v6edvz139bgedgw12sky0n82b3r8"
        },
        "updatedAt": 1772722496456
    }
}