82/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： clean

OpenClaw： benign

The skill's requirements and runtime instructions are generally consistent with a multi‑EVM wallet SDK — nothing obviously malicious — but there are a few minor inconsistencies and posture items you s...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774720240145,
        "_id": "k9798fvhhegtdjxax2p19cm2kx83rykd",
        "changelog": "# Evalanche v1.8.6\n\n## Summary\n\n`v1.8.6` closes the main issues raised in the March 28 capability report by making DeFi chain resolution deterministic, strengthening venue-truth reporting for Polymarket, and expanding the verification payloads returned by Hyperliquid and LI.FI MCP execution tools.\n\n## Highlights\n\n### Chain-aware DeFi routing\n\n- added interoperable address parsing for DeFi inputs such as `0x...@base`\n- introduced an Evalanche-owned dapp registry abstraction with local canonical mappings\n- routed known vaults like yoUSD to Base automatically\n- routed Avalanche-native staking like sAVAX to Avalanche automatically\n- explicit wrong-chain requests now fail clearly before contract decode\/revert noise\n\n### AvaPilot-backed Avalanche registry provider\n\n- vendored a static Avalanche service snapshot derived from AvaPilot registry data\n- added an Avalanche-specific provider behind the Evalanche registry interface\n- kept local canonical mappings authoritative over provider data\n- kept runtime resolution offline-safe by avoiding live GitHub\/network dependency\n\n### Polymarket venue-truth reporting\n\n- sell and reconciliation flows now surface venue-state summaries directly\n- reconciliation now warns when venue conditional balances and position snapshots disagree\n- unsafe sell attempts are blocked using venue truth even when other local signals look plausible\n\n### Hyperliquid and LI.FI recertification\n\n- Hyperliquid MCP execution tools now return richer post-submission verification payloads\n- LI.FI swap and compose tools now include stronger verification fields for tx, route, and transfer state\n- MCP-level regression coverage now explicitly covers empty-account, cancel, close, and cross-chain verification scenarios\n\n### Operator runbook\n\n- upgraded the live smoke checklist into a report-closure checklist\n- added explicit closure criteria tying report claims to code fixes, regressions, and manual live validation\n\n## Validation\n\n- `npm run test`\n- `npm run typecheck`\n- `npm run build`",
        "changelogSource": "user",
        "createdAt": 1774720240145,
        "parsed": {
            "clawdis": {
                "emoji": "⛓️",
                "envVars": [
                    {
                        "description": "Hex-encoded private key (EVM). Optional if using boot() or AGENT_MNEMONIC.",
                        "name": "AGENT_PRIVATE_KEY",
                        "required": false
                    },
                    {
                        "description": "BIP-39 mnemonic phrase (required for Avalanche multi-VM X\/P-Chain). Optional if using boot() or AGENT_PRIVATE_KEY.",
                        "name": "AGENT_MNEMONIC",
                        "required": false
                    },
                    {
                        "description": "ERC-8004 agent token ID for identity resolution (Avalanche C-Chain only).",
                        "name": "AGENT_ID",
                        "required": false
                    },
                    {
                        "description": "Directory for encrypted keystore in boot() mode. Default: ~\/.evalanche\/keys",
                        "name": "AGENT_KEYSTORE_DIR",
                        "required": false
                    },
                    {
                        "description": "EVM chain alias: 'ethereum', 'base', 'arbitrum', 'optimism', 'polygon', 'bsc', 'avalanche', 'fuji', etc. Default: avalanche.",
                        "name": "AVALANCHE_NETWORK",
                        "required": false
                    },
                    {
                        "description": "Alias for AVALANCHE_NETWORK. EVM chain to connect to.",
                        "name": "EVM_CHAIN",
                        "required": false
                    }
                ],
                "homepage": "https:\/\/github.com\/iJaack\/evalanche",
                "install": [
                    {
                        "bins": [
                            "evalanche-mcp"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install evalanche (npm)",
                        "package": "evalanche"
                    }
                ],
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "1.8.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17e3gjpsxfdsgxv67gc3hm3tx83g435",
        "displayName": "Giacomo Barbieri",
        "handle": "ijaack",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/6631681?v=4",
        "kind": "user",
        "linkedUserId": "kn71d3jmq0y01me0p17507ptm980184t"
    },
    "ownerHandle": "ijaack",
    "skill": {
        "_creationTime": 1772129263514,
        "_id": "kd7az3tkcq31apwy759f1wdcvd81w55n",
        "badges": [],
        "createdAt": 1772129263514,
        "displayName": "Skill",
        "latestVersionId": "k9798fvhhegtdjxax2p19cm2kx83rykd",
        "ownerPublisherId": "s17e3gjpsxfdsgxv67gc3hm3tx83g435",
        "ownerUserId": "kn71d3jmq0y01me0p17507ptm980184t",
        "slug": "evalanche",
        "stats": {
            "comments": 0,
            "downloads": 532,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 25
        },
        "summary": "Multi-EVM agent wallet SDK with onchain identity (ERC-8004), payment rails (x402), cross-chain liquidity (Li.Fi bridging + DEX aggregation + DeFi Composer),...",
        "tags": {
            "latest": "k9798fvhhegtdjxax2p19cm2kx83rykd"
        },
        "updatedAt": 1774759752887
    }
}