47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's requirements and instructions mostly match its stated purpose (creating an on-chain escrow), but it asks for a high-privilege PRIVATE_KEY and gives insecure guidance (e.g., passing the pri...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773232084147,
        "_id": "k97btxrm5syaysrwy9jc5d2gvh82pzwb",
        "changelog": "- Initial release of make-git-escrow.\n- Automates creation of a git escrow bounty for a test suite using the git-escrows CLI.\n- Guides users to verify dependencies and .env configuration.\n- Interactively collects required parameters: repository URL, commit hash, reward amount, oracle & arbiter addresses, and ERC20 token contract.\n- Executes the escrow submission and clearly reports the results, including Escrow UID and next steps.\n- Provides troubleshooting help if any command fails.",
        "changelogSource": "auto",
        "createdAt": 1773232084147,
        "parsed": {
            "clawdis": {
                "emoji": "🔒",
                "homepage": "https:\/\/github.com\/arkhai-io\/git-commit-trading",
                "primaryEnv": "PRIVATE_KEY",
                "requires": {
                    "bins": [
                        "git-escrows",
                        "git"
                    ],
                    "config": [
                        ".env"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "疒奀",
        "handle": "mlegls",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/46226846?v=4",
        "kind": "user",
        "linkedUserId": "kn72xcemvtth7cpg4k3ypetprd81envr"
    },
    "ownerHandle": "mlegls",
    "skill": {
        "_creationTime": 1773232084147,
        "_id": "kd74cnr8y595hhw30epk5dpee182qh0v",
        "badges": [],
        "createdAt": 1773232084147,
        "displayName": "Make Git Escrow",
        "latestVersionId": "k97btxrm5syaysrwy9jc5d2gvh82pzwb",
        "ownerUserId": "kn72xcemvtth7cpg4k3ypetprd81envr",
        "slug": "make-git-escrow",
        "stats": {
            "comments": 0,
            "downloads": 126,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Create a new git escrow bounty for a test suite. Use when the user wants to submit a challenge with escrowed token rewards for passing a failing test suite....",
        "tags": {
            "arkhai": "k97btxrm5syaysrwy9jc5d2gvh82pzwb",
            "blockchain": "k97btxrm5syaysrwy9jc5d2gvh82pzwb",
            "escrow": "k97btxrm5syaysrwy9jc5d2gvh82pzwb",
            "latest": "k97btxrm5syaysrwy9jc5d2gvh82pzwb"
        },
        "updatedAt": 1774331952658
    }
}