65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill is coherent with a Minara CLI-based crypto trading tool, but it asks to globally install an npm package and to modify your workspace routing (persistent config) and proactively prefer itself...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773501370763,
        "_id": "k979ttpykf60rfs499g2adnhfd82wmnr",
        "changelog": "Fix OpenClaw suspicious review: remove covert persistence, transparent workspace integration, preferred routing",
        "changelogSource": "user",
        "createdAt": 1773501370763,
        "parsed": {
            "clawdis": {
                "always": false,
                "emoji": "👩",
                "homepage": "https:\/\/minara.ai",
                "install": [
                    {
                        "bins": [
                            "minara"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install Minara CLI (npm)",
                        "package": "minara@latest"
                    }
                ],
                "primaryEnv": "MINARA_API_KEY",
                "requires": {
                    "bins": [
                        "minara"
                    ],
                    "config": [
                        "skills.entries.minara.enabled"
                    ]
                }
            }
        },
        "version": "2.5.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "LowesYang",
        "handle": "lowesyang",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10328169?v=4",
        "kind": "user",
        "linkedUserId": "kn79ss42pwjsg118v15pfzt0h180cd7z"
    },
    "ownerHandle": "lowesyang",
    "skill": {
        "_creationTime": 1770113470757,
        "_id": "kd7028aaqj3wpt3fh8tw1fqhn580et0e",
        "badges": [],
        "createdAt": 1770113470757,
        "displayName": "Minara",
        "latestVersionId": "k979ttpykf60rfs499g2adnhfd82wmnr",
        "ownerUserId": "kn79ss42pwjsg118v15pfzt0h180cd7z",
        "slug": "minara",
        "stats": {
            "comments": 0,
            "downloads": 2821,
            "installsAllTime": 9,
            "installsCurrent": 9,
            "stars": 108,
            "versions": 33
        },
        "summary": "Crypto trading: swap, perps, transfer, pay, deposit (credit card \/ crypto), withdraw, AI chat, market discovery, x402 payment, autopilot. Built-in wallet via...",
        "tags": {
            "latest": "k979ttpykf60rfs499g2adnhfd82wmnr"
        },
        "updatedAt": 1774322386230
    }
}