41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill is internally consistent with a DeFi payment-and-execution tool (it legitimately needs a PAYMENT_PRIVATE_KEY), but it requires a sensitive private key, asks users to place that key in local ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772194265046,
        "_id": "k972e5jqs0k0x1ha0n4g92826181z901",
        "changelog": "openclaw-elsa-x402 1.0.0 – Initial Release\n\n- Introduces DeFi tools for portfolio analysis, token search, pricing, and swap execution via the Elsa API, powered by x402 micropayments.\n- Implements customizable budget controls: max $0.05 per API call, $2.00 per day, and 30 calls\/min limit with UTC daily reset.\n- Provides a recommended, user-confirmed four-step swap execution flow with dry-run, confirmation, and pipelined transaction handling.\n- Supports a catalog of read-only tools for balances, portfolios, wallet risk, limit orders, perps, swap quotes, and transaction history.\n- Adds execution tools (with explicit enabling) for running swaps and managing transaction pipelines.\n- Requires environment variable PAYMENT_PRIVATE_KEY for operation and optional TRADE_PRIVATE_KEY for transaction signing.",
        "changelogSource": "user",
        "createdAt": 1772194265046,
        "parsed": {
            "clawdis": {
                "primaryEnv": "PAYMENT_PRIVATE_KEY",
                "requires": {
                    "env": [
                        "PAYMENT_PRIVATE_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "J Kishore Kumar",
        "handle": "justjkk",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/192893?v=4",
        "kind": "user",
        "linkedUserId": "kn7dhjskgtp01cs7chyzwemqs581zdds"
    },
    "ownerHandle": "justjkk",
    "skill": {
        "_creationTime": 1772194265046,
        "_id": "kd78gg8ysn4e4ajsvbt8nk1kp181zg4t",
        "badges": [],
        "createdAt": 1772194265046,
        "displayName": "Elsa x402 API",
        "latestVersionId": "k972e5jqs0k0x1ha0n4g92826181z901",
        "ownerUserId": "kn7dhjskgtp01cs7chyzwemqs581zdds",
        "slug": "elsa-x402-api",
        "stats": {
            "comments": 0,
            "downloads": 250,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "DeFi tools for portfolio analysis, token search, and swap execution via Elsa API with x402 micropayments",
        "tags": {
            "latest": "k972e5jqs0k0x1ha0n4g92826181z901"
        },
        "updatedAt": 1774327545220
    }
}