59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The code implements a polite Cubistic painting bot that matches the description, but the package/registry metadata omits required environment variables (sensitive API_KEY and BACKEND_URL), which is an...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771871812373,
        "_id": "k972m7j2bek4xsx4vyga3ekzps81qhh4",
        "changelog": "Initial release of Cubistic Bot Runner.\n\n- Provides scripts to run a polite Cubistic painter bot using the Cubistic HTTP API.\n- Includes \"paint once\" and \"paint loop\" Node.js scripts with proof-of-work support.\n- Ensures bots only paint on Void pixels and use exponential backoff on errors.\n- Environment variables allow configuration of backend URL, API key, and paint parameters.\n- Designed for safe public participation and minimal backend impact.",
        "changelogSource": "user",
        "createdAt": 1771871812373,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "andreasnordenadler",
        "handle": "andreasnordenadler",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/260216388?v=4",
        "kind": "user",
        "linkedUserId": "kn7e6n0b6k2925m4kpbgt0hx2s81pmef"
    },
    "ownerHandle": "andreasnordenadler",
    "skill": {
        "_creationTime": 1771871812373,
        "_id": "kd750v5k9jjyfjvfd4jfw3v3wx81qe8b",
        "badges": [],
        "createdAt": 1771871812373,
        "displayName": "Cubistic Painter",
        "latestVersionId": "k972m7j2bek4xsx4vyga3ekzps81qhh4",
        "ownerUserId": "kn7e6n0b6k2925m4kpbgt0hx2s81pmef",
        "slug": "cubistic-bot-runner",
        "stats": {
            "comments": 0,
            "downloads": 319,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Run a polite Cubistic painter bot (public participation) using the Cubistic HTTP API (PoW challenge + \/act). Includes a runnable Node script for “paint once”...",
        "tags": {
            "latest": "k972m7j2bek4xsx4vyga3ekzps81qhh4"
        },
        "updatedAt": 1772058939848
    }
}