37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's functionality (create/buy/sell tokens via BNB Chain MCP) matches its code, but the package/registry metadata omits a required PRIVATE_KEY and the runtime instructions tell the agent/user t...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773430350082,
        "_id": "k97dcv14vxpy2c4770s6frfanh82vxyd",
        "changelog": "- Updated FlapSkill 合约地址为 `0x8f059fEb5f34031EfFA024e9EB8C9968BfFE516a`\n- 所有关联的 USDT 授权与合约调用示例中的目标地址均已更新为新合约地址\n- 版本号从 1.0.2 升级为 1.0.3（SKILL.md 顶部）",
        "changelogSource": "user",
        "createdAt": 1773430350082,
        "version": "1.0.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "FlapxAgent",
        "handle": "nathanthoreaurl",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/184037876?v=4",
        "kind": "user",
        "linkedUserId": "kn700a5eyp29hesbzajy430fzh82vkf6"
    },
    "ownerHandle": "nathanthoreaurl",
    "skill": {
        "_creationTime": 1773409605536,
        "_id": "kd70q2pjq8ezvqk6a54s4971b182tvj5",
        "badges": [],
        "createdAt": 1773409605536,
        "displayName": "FXAI",
        "latestVersionId": "k97dcv14vxpy2c4770s6frfanh82vxyd",
        "ownerUserId": "kn700a5eyp29hesbzajy430fzh82vkf6",
        "slug": "fxai-skills",
        "stats": {
            "comments": 0,
            "downloads": 162,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 2,
            "versions": 5
        },
        "summary": "创建 V5 代币（USDT\/BNB 池子可选，0税或税收四档）；支持 USDT\/BNB 买入，按数量或按比例卖出到 USDT\/BNB。说「FXAI」触发。依赖 BNB Chain MCP，且 MCP env 中必须配置 PRIVATE_KEY。",
        "tags": {
            "bnb-chain": "k97fze1qpav8xfe6gza184pegs82v89d",
            "bsc": "k97fze1qpav8xfe6gza184pegs82v89d",
            "defi": "k97fze1qpav8xfe6gza184pegs82v89d",
            "flap": "k97fze1qpav8xfe6gza184pegs82v89d",
            "latest": "k97dcv14vxpy2c4770s6frfanh82vxyd",
            "mcp": "k97fze1qpav8xfe6gza184pegs82v89d",
            "token": "k97fze1qpav8xfe6gza184pegs82v89d",
            "usdt": "k97fze1qpav8xfe6gza184pegs82v89d"
        },
        "updatedAt": 1774333150205
    }
}