59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The package appears to implement a legitimate metals trading bot, but there are important inconsistencies (registry metadata vs. files/README), missing provenance, and the skill asks you to provide li...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770815524922,
        "_id": "k9705z1jvycee1p7wpn4c64nh180zb62",
        "changelog": "Initial release of metals-desk-os — institutional automated trading OS for gold and silver:\n\n- Provides full desk-level trading automation for XAU\/USD and XAG\/USD with real-time analysis, execution, and risk management.\n- Features modular, event-driven architecture with specialized engines for market structure, liquidity, bias, macro, volatility, risk, execution, and performance tracking.\n- Offers multiple operational modes: advisory, semi-automated, fully-automated, and risk-off.\n- Enforces strict, non-negotiable institutional risk protocols for all trading activity.\n- Includes automated trade management logic (multi-targets, partial closes, trailing stops).\n- Integrates with MetaTrader 5 via MetaAPI and supports alerting via WhatsApp and Telegram.\n- Provides a detailed file structure and installation instructions for rapid deployment.",
        "changelogSource": "user",
        "createdAt": 1770815524922,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "cfilipemt",
        "handle": "cfilipemt",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/85939563?v=4",
        "kind": "user",
        "linkedUserId": "kn7amc174jr5jnbzqyyc3ssy4n80vm5k"
    },
    "ownerHandle": "cfilipemt",
    "skill": {
        "_creationTime": 1770815524922,
        "_id": "kd777f1pqmyyn50yf3ta0hn74580yqed",
        "badges": [],
        "createdAt": 1770815524922,
        "displayName": "XAUUSD",
        "latestVersionId": "k9705z1jvycee1p7wpn4c64nh180zb62",
        "ownerUserId": "kn7amc174jr5jnbzqyyc3ssy4n80vm5k",
        "slug": "metals-desk-os",
        "stats": {
            "comments": 0,
            "downloads": 1111,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 2,
            "versions": 1
        },
        "summary": "Institutional Desk-Level Fully Automated Trading OS for XAU\/USD and XAG\/USD. Event-driven, risk-first, multi-engine architecture that runs as a continuous analysis and execution pipeline inside OpenClaw's trader agent.",
        "tags": {
            "latest": "k9705z1jvycee1p7wpn4c64nh180zb62"
        },
        "updatedAt": 1772065535894
    }
}