72/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： benign

The skill's code, instructions, and resource requests are consistent with an on‑chain copy‑trading tool that requires local private keys and an API key; nothing requests unrelated credentials or exter...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773250038474,
        "_id": "k97ef9zyqzffmmpx0fb7cn6y8x82pzb3",
        "changelog": "**Summary:** This version updates credential handling and enforces increased security and precision for runtime operations.\n\n- Credentials are now always loaded from a fixed user-home path (`~\/.coinpilot\/coinpilot.json`), removing support for environment path overrides.\n- Skill and CLI require exactly 1 primary and 9 follower wallets for operation.\n- Adds a redacted credentials template (`coinpilot.template.json`) and removes the former example file.\n- All API base URLs must be allowlisted and resolved only from `coinpilot.json` (not from environment variables).\n- Documentation and workflow were rewritten and clarified, including setup steps, credential bootstrapping, and security guardrails.\n- Minor updates to CLI and references for improved consistency and credential flow.",
        "changelogSource": "auto",
        "createdAt": 1773250038474,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/github.com\/coinpilot-labs\/skills",
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "1.0.7"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Alan Ng",
        "handle": "alannkl",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32792048?v=4",
        "kind": "user",
        "linkedUserId": "kn71gpq5ms6j9ev3nd1bwcdnjx8180xz"
    },
    "ownerHandle": "alannkl",
    "skill": {
        "_creationTime": 1771240174890,
        "_id": "kd78a0h59pcc1kp5fyb084ajds8186wf",
        "badges": [],
        "createdAt": 1771240174890,
        "displayName": "Coinpilot Hyperliquid Copy Trade",
        "latestVersionId": "k97ef9zyqzffmmpx0fb7cn6y8x82pzb3",
        "ownerUserId": "kn71gpq5ms6j9ev3nd1bwcdnjx8180xz",
        "slug": "coinpilot-hyperliquid-copy-trade",
        "stats": {
            "comments": 0,
            "downloads": 621,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 3,
            "versions": 7
        },
        "summary": "Automate copy trading on Hyperliquid via Coinpilot to discover, investigate, and mirror top on-chain traders in real time with low execution latency. Runtime...",
        "tags": {
            "latest": "k97ef9zyqzffmmpx0fb7cn6y8x82pzb3"
        },
        "updatedAt": 1774325174892
    }
}