65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's description, runtime instructions, and metadata do not fully match the included script: the README talks about Nasdaq API + Finnhub while the script scrapes CNBC HTML, and the skill metada...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774323174252,
        "_id": "k970vhxvcm3shfqam49d4pr5a983hrkk",
        "changelog": "**Data source switch and coverage adjustment:**\n- 主要数据源切换为 Nasdaq API（ETF无需注册) \n- 指标列表精简为 SPY、QQQ（Nasdaq API）及 CL、DX、NG、SI（Finnhub）。\n- 更新数据结构说明、展示方式与建议使用方法（更简单，依赖更少）。\n- 安全说明与参数传递方式保持一致，文档更加精简清晰。",
        "changelogSource": "user",
        "createdAt": 1774323174252,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17fx97n8s9qyne18vv7vbdg9h83hheq",
        "displayName": "loonslo",
        "handle": "loonslo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/12945268?v=4",
        "kind": "user",
        "linkedUserId": "kn73t4tnjhev4xtyehe8ep3t3s835maz"
    },
    "ownerHandle": "loonslo",
    "skill": {
        "_creationTime": 1774258340016,
        "_id": "kd733p6stpp5gy45y5pppqqzz583eht9",
        "badges": [],
        "createdAt": 1774258340016,
        "displayName": "finance_monitor",
        "latestVersionId": "k970vhxvcm3shfqam49d4pr5a983hrkk",
        "ownerPublisherId": "s17fx97n8s9qyne18vv7vbdg9h83hheq",
        "ownerUserId": "kn73t4tnjhev4xtyehe8ep3t3s835maz",
        "slug": "fin-monitor",
        "stats": {
            "comments": 0,
            "downloads": 26,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "从 Nasdaq API 和 Finnhub 抓取金融指标数据（ETF、原油、美元指数、天然气、白银），写入本地 SQLite 数据库。无需注册即可获取 ETF 数据，Finnhub 免费账户覆盖大宗商品。",
        "tags": {
            "latest": "k970vhxvcm3shfqam49d4pr5a983hrkk"
        },
        "updatedAt": 1774323411421
    }
}