41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to do what it says (pay-per-call trading endpoints) but it requires signing on-chain x402 payments (i.e., access to a wallet signing key) while not declaring credential requirements ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771240350399,
        "_id": "k975fvcweh13sgs87xr4a2z4cd818kxx",
        "changelog": "Version 1.0.1 Changelog\n\n- Corrected agent crew: 7 roles (added strategist, scribe, scout)                                                                                                                                                \n  - Documented all 12 risk engine gates with denial codes                                                                                                                                                          \n  - Added missing API endpoints (login, refresh, replay export, floor-tape)                                                                                                                                        \n  - Updated StrategyProposal and RiskConfig schemas to match live contracts\n  - Updated WebSocket protocol to match typed message schemas\n  - Removed unimplemented features from docs (volatility breaker, per-symbol exposure cap)",
        "changelogSource": "user",
        "createdAt": 1771240350399,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Andrew Wilkinson",
        "handle": "adwilkinson",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/29403976?v=4",
        "kind": "user",
        "linkedUserId": "kn78nz4cwfpq5ecmd9sn14pw5n819e0n"
    },
    "ownerHandle": "adwilkinson",
    "skill": {
        "_creationTime": 1771235534031,
        "_id": "kd77k5d3qqxzwbdmvz0netwwax819thf",
        "badges": [],
        "createdAt": 1771235534031,
        "displayName": "HL Privateer",
        "latestVersionId": "k975fvcweh13sgs87xr4a2z4cd818kxx",
        "ownerUserId": "kn78nz4cwfpq5ecmd9sn14pw5n819e0n",
        "slug": "hl-privateer-fund",
        "stats": {
            "comments": 0,
            "downloads": 494,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Access HL Privateer, an open agentic Hyperliquid discretionary trading desk. Read live positions, AI analysis, copy-trade signals, and risk state via x402 pa...",
        "tags": {
            "latest": "k975fvcweh13sgs87xr4a2z4cd818kxx"
        },
        "updatedAt": 1774325168118
    }
}