59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's documentation and runtime instructions are coherent with on‑chain verification, but the SKILL.md repeatedly references sensitive environment variables (private keys, relayer secrets, deplo...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771791993875,
        "_id": "k970t2d6t0nrvyy8c8x9zya4t981n8v3",
        "changelog": "Initial release of clawhub-krump-verify: on-chain move verification for Story IP with USDC.k and x402\/EVVM integration.\n\n- Agents and users can verify dance moves against registered Story IP assets on Story Aeneid (chain ID 1315).\n- Supports two payment flows: direct USDC.k wallet payments or EVVM\/x402 receipt-based payments (agent\/relayer-friendly).\n- Exposes key contract functions: `verifyMove`, `verifyMoveWithReceipt`, and payment receipt submission for relayers.\n- All verification and payment events are on-chain and auditable; frontend and reference guides provided.\n- Includes detailed setup for agents, relayer, contract addresses, and troubleshooting common EVVM\/x402 issues.",
        "changelogSource": "auto",
        "createdAt": 1771791993875,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Arun Nadarasa",
        "handle": "arunnadarasa",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/186420617?v=4",
        "kind": "user",
        "linkedUserId": "kn76gfsk6018hw3epck2qa18q580nh1j"
    },
    "ownerHandle": "arunnadarasa",
    "skill": {
        "_creationTime": 1771791993875,
        "_id": "kd78zw7rpn0jftt0qzkv2ranax81mxk3",
        "badges": [],
        "createdAt": 1771791993875,
        "displayName": "Clawhub Krump Verify",
        "latestVersionId": "k970t2d6t0nrvyy8c8x9zya4t981n8v3",
        "ownerUserId": "kn76gfsk6018hw3epck2qa18q580nh1j",
        "slug": "krumpverify",
        "stats": {
            "comments": 0,
            "downloads": 321,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Enables AI agents (e.g. OpenClaw) to understand and use Krump Verify for on-chain move verification against Story IP. Use when the user or agent needs to ver...",
        "tags": {
            "latest": "k970t2d6t0nrvyy8c8x9zya4t981n8v3"
        },
        "updatedAt": 1772058635891
    }
}