41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it claims (a CLI to interact with the JOULE DAO and Moltbook), but its declared metadata omits the credentials it actually uses and it embeds a hardcoded Moltbook API key in...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771459323943,
        "_id": "k9722wd2q9tbhfr8bbc65pekdn81fqd0",
        "changelog": "Initial launch: JOULE DAO skill for the energy-backed agent token on Base. Vote, discuss, earn JOULE through Proof of Productive Work.",
        "changelogSource": "user",
        "createdAt": 1771459323943,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "echo-autonomous",
        "handle": "echo-autonomous",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258002730?v=4",
        "kind": "user",
        "linkedUserId": "kn7egg4fqgr6en503rxhfwkknh81dm62"
    },
    "ownerHandle": "echo-autonomous",
    "skill": {
        "_creationTime": 1771459323943,
        "_id": "kd762ede5px836nnaz93qje64d81esf9",
        "badges": [],
        "createdAt": 1771459323943,
        "displayName": "JOULE DAO",
        "latestVersionId": "k9722wd2q9tbhfr8bbc65pekdn81fqd0",
        "ownerUserId": "kn7egg4fqgr6en503rxhfwkknh81dm62",
        "slug": "joule-dao",
        "stats": {
            "comments": 0,
            "downloads": 484,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Interact with JOULE DAO on Base: track treasury, view proposals, vote, discuss, check balances, join as member, and earn JOULE for productive work contributi...",
        "tags": {
            "latest": "k9722wd2q9tbhfr8bbc65pekdn81fqd0"
        },
        "updatedAt": 1774325675930
    }
}