59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code and instructions appear to implement a legitimate Kubera API client, but the registry metadata fails to declare the API credentials the skill requires (KUBERA_API_KEY and KUBERA_SECRE...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770601789093,
        "_id": "k97eh2g8xhqnmr1401ks7zvkw580thbm",
        "changelog": "kubera-skill v1.0.0\n\n- Initial release.\n- Enables reading and managing portfolio data (net worth, assets, debts, allocation, holdings) via the Kubera.com API.\n- Provides CLI scripts for querying portfolios, summaries, searching, and updating asset values.\n- Supports machine-readable JSON output and filtering\/sorting functionality.\n- Documents environment variable setup, rate limits, and API references.",
        "changelogSource": "auto",
        "createdAt": 1770601789093,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "BYWallace",
        "handle": "bywallace",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7144854?v=4",
        "kind": "user",
        "linkedUserId": "kn7450c8sksspgvb9pbffsxr6d80thrp"
    },
    "ownerHandle": "bywallace",
    "skill": {
        "_creationTime": 1770601789093,
        "_id": "kd700xxxhsk494ve02yzzyyq5n80tvm5",
        "badges": [],
        "createdAt": 1770601789093,
        "displayName": "Kubera",
        "latestVersionId": "k97eh2g8xhqnmr1401ks7zvkw580thbm",
        "ownerUserId": "kn7450c8sksspgvb9pbffsxr6d80thrp",
        "slug": "kubera-skill",
        "stats": {
            "comments": 0,
            "downloads": 866,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Read and manage Kubera.com portfolio data (net worth, assets, debts, allocation, holdings). Use when a user asks about their finances, net worth, portfolio, investments, holdings, asset allocation, or wants to update asset values in Kubera. Works with any AI agent or CLI that can run Python scripts.",
        "tags": {
            "latest": "k97eh2g8xhqnmr1401ks7zvkw580thbm"
        },
        "updatedAt": 1772336419336
    }
}