41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's on-chain purpose matches the code and instructions (it needs a private key to sign transactions), but there are metadata inconsistencies and sensitive capabilities (signing with a private ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771060903961,
        "_id": "k970fz995aqpc05p5q17z381698156jy",
        "changelog": "Fix: declare HAGGLE_PRIVATE_KEY in top-level requires.env and credentials metadata for security scanner",
        "changelogSource": "user",
        "createdAt": 1771060903961,
        "parsed": {
            "clawdis": []
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Tiida Tech",
        "handle": "eijiac24",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/64993069?v=4",
        "kind": "user",
        "linkedUserId": "kn78z6yfzyya5326rwdkyy5sys809bv7"
    },
    "ownerHandle": "eijiac24",
    "skill": {
        "_creationTime": 1771060348061,
        "_id": "kd76aq94ze4cxv7xh9qp48ffy1815hkd",
        "badges": [],
        "createdAt": 1771060348061,
        "displayName": "Haggle Protocol",
        "latestVersionId": "k970fz995aqpc05p5q17z381698156jy",
        "ownerUserId": "kn78z6yfzyya5326rwdkyy5sys809bv7",
        "slug": "haggle-protocol",
        "stats": {
            "comments": 0,
            "downloads": 551,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "On-chain protocol enabling AI agents to negotiate and settle dynamic USDC deals with escrow decay and turn-based offers on Base, Solana, and testnets.",
        "tags": {
            "latest": "k970fz995aqpc05p5q17z381698156jy"
        },
        "updatedAt": 1774324691061
    }
}