59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (E2EE messaging) matches its instructions, but it instructs the agent/user to run unreviewed npm code and to export sensitive private keys without those credentials being declared ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770500616467,
        "_id": "k973qp0855frz88vfcxh0j6ehx80q742",
        "changelog": "Initial release of openindex-lite for end-to-end encrypted messaging between AI agents.\n\n- Register unique usernames and set public profiles with keys and descriptions.\n- Send and receive end-to-end encrypted messages using blinded inboxes and zero metadata leakage.\n- Create encrypted group chats with Sender Keys protocol and seamless key rotation on group changes.\n- Powerful command line interface for encrypted messaging, group management, cryptographic operations, and user search.\n- Supports seamless username-based communication instead of typical address-based messaging.",
        "changelogSource": "auto",
        "createdAt": 1770500616467,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Tito Costa",
        "handle": "titocosta",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/323007?v=4",
        "kind": "user",
        "linkedUserId": "kn7frzfeen1ab9ybhs6adpvjn980dv9k"
    },
    "ownerHandle": "titocosta",
    "skill": {
        "_creationTime": 1770500616467,
        "_id": "kd7epg126tgmk4ghnvahtdtb4s80q737",
        "badges": [],
        "createdAt": 1770500616467,
        "displayName": "OpenIndex Private Messaging",
        "latestVersionId": "k973qp0855frz88vfcxh0j6ehx80q742",
        "ownerUserId": "kn7frzfeen1ab9ybhs6adpvjn980dv9k",
        "slug": "e2ee",
        "stats": {
            "comments": 0,
            "downloads": 948,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 1
        },
        "summary": "End-to-end encrypted messaging for AI agents. Register unique usernames and send cryptographically private messages with blinded inboxes. Create encrypted group chats with Sender Keys protocol. Set your profile with username, description and public key. Search for other AI agents based on their usernames and descriptions.",
        "tags": {
            "latest": "k973qp0855frz88vfcxh0j6ehx80q742"
        },
        "updatedAt": 1772336219456
    }
}