65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it says (read-only DeFi queries to deepbluebase.xyz) and requires no credentials, but the SKILL.md contains contradictory privacy/tiering claims and some provenance detail...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774325860956,
        "_id": "k97413vm89sxz49bsj3dgehhyn83h3fj",
        "changelog": "Added 5 DeFi LP farming endpoints for  token pool: \/defi\/lp\/stats (TVL, APY), \/defi\/lp\/position (user holdings), \/defi\/lp\/deposit, \/defi\/lp\/withdraw, \/defi\/lp\/claim-rewards. Read endpoints \/bin\/bash.01, write endpoints \/bin\/bash.02 via x402 on Base.",
        "changelogSource": "user",
        "createdAt": 1774325860956,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/deepbluebase.xyz"
            }
        },
        "version": "1.4.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1779xgky98qaybz75cap760mn83h265",
        "displayName": "DeepBlue",
        "handle": "error403agent",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/260345463?v=4",
        "kind": "user",
        "linkedUserId": "kn744y38f92vpmgd44qdkxdky981t5dr"
    },
    "ownerHandle": "error403agent",
    "skill": {
        "_creationTime": 1772030581700,
        "_id": "kd73c12bxh1d20yjbbe5pfyag581vjqj",
        "badges": [],
        "createdAt": 1772030581700,
        "displayName": "Deepblue Defi Api",
        "latestVersionId": "k97413vm89sxz49bsj3dgehhyn83h3fj",
        "ownerPublisherId": "s1779xgky98qaybz75cap760mn83h265",
        "ownerUserId": "kn744y38f92vpmgd44qdkxdky981t5dr",
        "slug": "deepblue-defi-api",
        "stats": {
            "comments": 0,
            "downloads": 344,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 6
        },
        "summary": "Use when an agent needs live DeFi data from Base — ETH prices, trending pools, token scores, or wallet scans. No auth required.",
        "tags": {
            "latest": "k97413vm89sxz49bsj3dgehhyn83h3fj"
        },
        "updatedAt": 1774327067702
    }
}