41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally matches its stated DeFi purpose, but it contains a hard-coded demo private key and embedded RPC URL in the shipped config which is disproportionate and raises security concerns you...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770554903950,
        "_id": "k97erz3x5x6pe51gc23d1btmxx80sy3y",
        "changelog": "## v1.0.0 — Initial Release                                          \n                                                                       \n  ### Features                                                         \n  - Add liquidity to Uniswap v4 pool via AI-powered ACLM hook          \n  (auto-mint test tokens)                                              \n  - View liquidity positions with tick\/price ranges and auto-rebalance \n  status                                                               \n  - Check oracle rebalance signals and dynamic fee recommendations     \n  - View pool statistics (volume, volatility, current fee, last tick)  \n  - Post oracle signals (rebalance + fee) for authorized bot operators \n  - Full Sepolia testnet deployment with verified contracts\n\n  ### Architecture\n  - OpenClawACLMHook (BaseCustomAccounting) — auto-rebalance, dynamic\n  fees, limit orders\n  - OpenClawOracle — confidence-scored signal bridge with 5min TTL\n  - 6 Node.js scripts using viem for all blockchain interactions\n  - Reference docs for architecture and contract ABIs\n\n  ### Contracts Deployed (Sepolia)\n  - Hook: 0xbD2802B7215530894d5696ab8450115f56b1fAC0\n  - Oracle: 0x300Fa0Af86201A410bEBD511Ca7FB81548a0f027\n  - Test tokens: GBB + GBA (free mint)",
        "changelogSource": "user",
        "createdAt": 1770554903950,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "AqilJaafree",
        "handle": "aqiljaafree",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/73504832?v=4",
        "kind": "user",
        "linkedUserId": "kn7b1axhky1p5yf42jre65j87s80sxyc"
    },
    "ownerHandle": "aqiljaafree",
    "skill": {
        "_creationTime": 1770554903950,
        "_id": "kd76xf6svd3w5tpbbmz7rxg4bd80skc3",
        "badges": [],
        "createdAt": 1770554903950,
        "displayName": "AI-powered Automated Concentrated Liquidity Manager for Uniswap v4. Manage liquidity positions, auto-rebalance out-of-range positions, optimize LP fees dynamically, execute limit orders (stop-loss, take-profit), and monitor oracle signals — all from chat. Deployed on Ethereum Sepolia with verified contracts. Use this skill when users ask about DeFi liquidity provision, Uniswap v4 hooks, pool management, LP positions, impermanent loss, or automated market making.",
        "latestVersionId": "k97erz3x5x6pe51gc23d1btmxx80sy3y",
        "ownerUserId": "kn7b1axhky1p5yf42jre65j87s80sxyc",
        "slug": "ghostbot-uniswap-v4hooks-testnet",
        "stats": {
            "comments": 0,
            "downloads": 1495,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "GhostBot ACLM — AI-powered Automated Concentrated Liquidity Manager for Uniswap v4. Manage liquidity positions, auto-rebalance out-of-range positions, optimize LP fees dynamically, execute limit orders (stop-loss, take-profit), and monitor oracle signals — all from chat. Deployed on Ethereum Sepolia with verified contracts. Use this skill when users ask about DeFi liquidity provision, Uniswap v4 hooks, pool management, LP positions, impermanent loss, or automated market making.",
        "tags": {
            "latest": "k97erz3x5x6pe51gc23d1btmxx80sy3y"
        },
        "updatedAt": 1774323314678
    }
}