59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (ERC-8004 agent registration & SIWA signing) is plausible, but the SKILL.md requires an external keyring proxy, HMAC secrets, and npm/pnpm tooling while the declared metadata lists...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770382164453,
        "_id": "k97d0hn12h90bknm3pn96sqdgd80m5j2",
        "changelog": "No file changes detected since the previous release.\n\n- Version bumped to 0.0.2 with no functional or documentation updates.\n- No user-facing or internal changes; behavior is identical to v0.0.1.",
        "changelogSource": "user",
        "createdAt": 1770382164453,
        "version": "0.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "limone-eth",
        "handle": "limone-eth",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32481391?v=4",
        "kind": "user",
        "linkedUserId": "kn78tjq6k661wj7vjqqq6jvj11808fgj"
    },
    "ownerHandle": "limone-eth",
    "skill": {
        "_creationTime": 1770327049295,
        "_id": "kd76ey3wz29m7g47tjxd4ce53d80j8wn",
        "badges": [],
        "createdAt": 1770327049295,
        "displayName": "ERC8004 Agent",
        "latestVersionId": "k97d0hn12h90bknm3pn96sqdgd80m5j2",
        "ownerUserId": "kn78tjq6k661wj7vjqqq6jvj11808fgj",
        "slug": "erc8004-agent",
        "stats": {
            "comments": 0,
            "downloads": 1229,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "8004 Agent Skill for registering AI agents on the ERC-8004 Trustless Agents standard and authenticating them via SIWA (Sign In With Agent). Use this skill when an agent needs to: (1) create or manage an Ethereum wallet for onchain identity, (2) register on the ERC-8004 Identity Registry as an NFT-based agent identity (SIGN UP), (3) authenticate with a server by proving ownership of an ERC-8004 identity using a signed challenge (SIGN IN \/ SIWA), (4) build or update an ERC-8004 registration file (metadata JSON with endpoints, trust models, services), (5) upload agent metadata to IPFS or base64 data URI, (6) look up or verify an agent's onchain registration. The agent persists public identity state in MEMORY.md. Private keys are held in a separate keyring proxy server — the agent can request signatures but never access the key itself. Triggers on: ERC-8004, trustless agents, agent registration, SIWA, Sign In With Agent, agent identity NFT, Agent0 SDK, agent wallet, agent keystore, keyring proxy.",
        "tags": {
            "latest": "k97d0hn12h90bknm3pn96sqdgd80m5j2"
        },
        "updatedAt": 1772249619736
    }
}