41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (a remote lnd signer) is plausible and the scripts largely match that goal, but there are mismatches and risky defaults (undeclared binary/environment requirements, sourcing missin...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770777416895,
        "_id": "k972fb6dbxpptcnswn5y93ze4x80zgr3",
        "changelog": "Initial release: Secure remote signer for Lightning nodes\n\n- Provides a containerized lnd remote signer to hold private keys separately from agent nodes, supporting Docker (default) and native installations.\n- Exports a credentials bundle (accounts JSON, TLS cert, admin macaroon) for watch-only litd nodes, enabling firewalling of private key material from agent machines.\n- Includes setup, export\/import scripts, and detailed workflow for secure and watch-only node operations.\n- Emphasizes strict separation: signer cannot route payments or open channels; it only signs transactions on request.\n- Production guidance: use scoped macaroons, restrict RPC access, and run signer on dedicated or hardened hardware for improved security.",
        "changelogSource": "user",
        "createdAt": 1770777416895,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Roasbeef",
        "handle": "roasbeef",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/998190?v=4",
        "kind": "user",
        "linkedUserId": "kn7cah8vhcg07c8ar7n3qat51n80zerj"
    },
    "ownerHandle": "roasbeef",
    "skill": {
        "_creationTime": 1770777416895,
        "_id": "kd71taz3qf7nc101aac3zgyafx80z39y",
        "badges": [],
        "createdAt": 1770777416895,
        "displayName": "Lightning Security Module",
        "latestVersionId": "k972fb6dbxpptcnswn5y93ze4x80zgr3",
        "ownerUserId": "kn7cah8vhcg07c8ar7n3qat51n80zerj",
        "slug": "lightning-security-module",
        "stats": {
            "comments": 0,
            "downloads": 890,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Set up an lnd remote signer container that holds private keys separately from the agent. Exports a credentials bundle (accounts JSON, TLS cert, admin macaroon) for watch-only litd nodes. Container-first with Docker, native fallback. Use when firewalling private key material from AI agents.",
        "tags": {
            "latest": "k972fb6dbxpptcnswn5y93ze4x80zgr3"
        },
        "updatedAt": 1774324031986
    }
}