59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (baking lnd macaroons) matches the included script, but the package metadata omits required binaries and the runtime instructions operate on very sensitive credentials (admin macar...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770777646123,
        "_id": "k971dsgxvdqg0ed4b6fncta25180za14",
        "changelog": "Initial release of lnd-macaroon-bakery.\n\n- Bake least-privilege lnd macaroons for pay-only, invoice-only, read-only, channel-admin, and signer-only roles.\n- Inspect macaroons to verify permissions before use.\n- Supports custom permission sets for fine-grained access control.\n- Works with local, Docker, and remote lnd nodes.\n- Features macaroon rotation and signer macaroon scoping (for lightning-security-module).\n- Includes guidance and best practices to avoid using `admin.macaroon` in production.",
        "changelogSource": "user",
        "createdAt": 1770777646123,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Roasbeef",
        "handle": "roasbeef",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/998190?v=4",
        "kind": "user",
        "linkedUserId": "kn7cah8vhcg07c8ar7n3qat51n80zerj"
    },
    "ownerHandle": "roasbeef",
    "skill": {
        "_creationTime": 1770777646123,
        "_id": "kd70jt6rh2dyg383kjn6a5mcg980yyr4",
        "badges": [],
        "createdAt": 1770777646123,
        "displayName": "lnd macaroon bakery",
        "latestVersionId": "k971dsgxvdqg0ed4b6fncta25180za14",
        "ownerUserId": "kn7cah8vhcg07c8ar7n3qat51n80zerj",
        "slug": "lnd-macaroon-bakery",
        "stats": {
            "comments": 0,
            "downloads": 859,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Bake, inspect, and manage lnd macaroons for least-privilege agent access. Use when an agent needs scoped credentials — pay-only, invoice-only, read-only, or custom permissions. Also covers signer macaroon scoping and macaroon rotation.",
        "tags": {
            "latest": "k971dsgxvdqg0ed4b6fncta25180za14"
        },
        "updatedAt": 1772337102619
    }
}