59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill asks for a WALLET_PRIVATE_KEY as its primary credential even though its own docs say signing should be done locally and never transmit your private key — that mismatch is disproportionate an...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769943184953,
        "_id": "k97ac36ph7sg4sprvzf4r7fa0h80b5c9",
        "changelog": "- Changed authentication instructions: now requires using the Cookie header with access_token for all authenticated API requests.\n- Updated all code examples to use Cookie-based authentication instead of Authorization: Bearer headers.\n- Added a note that Authorization headers are not currently supported, and Cookie headers should be used.\n- No changes to file content or API structure otherwise.",
        "changelogSource": "user",
        "createdAt": 1769943184953,
        "parsed": {
            "clawdis": {
                "emoji": "🦑",
                "primaryEnv": "WALLET_PRIVATE_KEY",
                "requires": {
                    "env": [
                        "WALLET_PRIVATE_KEY"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "zcor",
        "handle": "zcor",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/13426766?v=4",
        "kind": "user",
        "linkedUserId": "kn73h6104dtm76df6php80ke0s80814j"
    },
    "ownerHandle": "zcor",
    "skill": {
        "_creationTime": 1769901480015,
        "_id": "kd71sgh6s8p1rdcqz4b8d11d718097a7",
        "badges": [],
        "createdAt": 1769901480015,
        "displayName": "Leviathan News",
        "latestVersionId": "k97ac36ph7sg4sprvzf4r7fa0h80b5c9",
        "ownerUserId": "kn73h6104dtm76df6php80ke0s80814j",
        "slug": "leviathan-news",
        "stats": {
            "comments": 0,
            "downloads": 1709,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "Crowdsourced crypto news API. Submit articles, comment, and vote to earn SQUID tokens. Human-curated DeFi news with token-aware tagging.",
        "tags": {
            "latest": "k97ac36ph7sg4sprvzf4r7fa0h80b5c9"
        },
        "updatedAt": 1772162342076
    }
}