55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill largely does what its description promises (on‑chain queries, prices, yields) but contains several inconsistencies and a risky behavior: one script loads a top-level .env and writes cache fi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774389987881,
        "_id": "k9720g6ssrybhc2f27sf5vhqxd83gvv2",
        "changelog": "- Clarified that most scripts require no API keys; only `cmc-sentiment.js` needs a `CMC_API_KEY`\n- Updated documentation in SKILL.md to reflect this requirement\n- No changes to functionality or scripts, documentation update only",
        "changelogSource": "auto",
        "createdAt": 1774389987881,
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175wg8gt8gbcdafp6w5d0s7gh83gsp5",
        "displayName": "old-greggyboy",
        "handle": "old-greggyboy",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/266362655?v=4",
        "kind": "user",
        "linkedUserId": "kn7348wh74j9bf7af0y2d9k20182zjny"
    },
    "ownerHandle": "old-greggyboy",
    "skill": {
        "_creationTime": 1774141606820,
        "_id": "kd7f3vc6rffeb3ebhdbrg3vnj583cc5q",
        "badges": [],
        "createdAt": 1774141606820,
        "displayName": "Defi Scout",
        "latestVersionId": "k9720g6ssrybhc2f27sf5vhqxd83gvv2",
        "ownerPublisherId": "s175wg8gt8gbcdafp6w5d0s7gh83gsp5",
        "ownerUserId": "kn7348wh74j9bf7af0y2d9k20182zjny",
        "slug": "defi-scout",
        "stats": {
            "comments": 0,
            "downloads": 45,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "On-chain DeFi intelligence for AI agents. Use when asked about wallet balances, token prices, DEX quotes, yield opportunities, protocol TVL, gas prices, or a...",
        "tags": {
            "latest": "k9720g6ssrybhc2f27sf5vhqxd83gvv2"
        },
        "updatedAt": 1774390320962
    }
}