41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match its stated purpose (buying API keys with USDC) but contain risky and unclear elements — notably third‑party endpoints (including an HTTP URL) and required signed payment...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772074923341,
        "_id": "k97dy8bq2dhy7skx6f32w97w4d81xwr1",
        "changelog": "- Added user account management endpoints for viewing API keys, account info, and usage statistics.\n- Introduced automatic user registration: user accounts are created on first API key purchase; no separate registration required.\n- Distinguished between payment API (fact-api) and user management API (napi-ser) with clear base URLs.\n- Updated documentation to include new endpoints: `\/user\/me` and `\/user\/my-keys`.\n- Description now includes user account and usage management use cases.",
        "changelogSource": "user",
        "createdAt": 1772074923341,
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "newblock",
        "handle": "newblock",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/39322267?v=4",
        "kind": "user",
        "linkedUserId": "kn7anz8pv9qqyhx43kwh05xg3x81qmby"
    },
    "ownerHandle": "newblock",
    "skill": {
        "_creationTime": 1772026720006,
        "_id": "kd76hbntxgb2je701z5rwnzbp981vham",
        "badges": [],
        "createdAt": 1772026720006,
        "displayName": "iautopay",
        "latestVersionId": "k97dy8bq2dhy7skx6f32w97w4d81xwr1",
        "ownerUserId": "kn7anz8pv9qqyhx43kwh05xg3x81qmby",
        "slug": "iautopay",
        "stats": {
            "comments": 0,
            "downloads": 321,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Purchase API keys from iAutoPay Fact API using USDC on Base chain. Use this skill when: - Buying API keys for AI agent payment services - Managing API key su...",
        "tags": {
            "latest": "k97dy8bq2dhy7skx6f32w97w4d81xwr1"
        },
        "updatedAt": 1774327055379
    }
}