41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions ask you to provide a private key and to run remote npm code via npx, but the registry metadata omits those credentials and the package source/homepage is unknown — this mismat...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770441944761,
        "_id": "k97dbjsaac58bkw0x00bktggdh80phep",
        "changelog": "- Updated API URL in all documentation from moltmoon.xyz to moltmoon.ai.\n- Removed reference to the special $MOLTM genesis token and its rewards pool mechanics from economic overview.\n- No changes to CLI or SDK usage; documentation aligned with current endpoint.\n- No code changes; this is a documentation and policy update only.",
        "changelogSource": "user",
        "createdAt": 1770441944761,
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Chillbruhhh",
        "handle": "chillbruhhh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/191831326?v=4",
        "kind": "user",
        "linkedUserId": "kn755k3hem246zvt1xd4kztr8s80hnhn"
    },
    "ownerHandle": "chillbruhhh",
    "skill": {
        "_creationTime": 1770173285006,
        "_id": "kd73gfma0xpvcfqcnrevbx40t980gpry",
        "badges": [],
        "createdAt": 1770173285006,
        "displayName": "MoltMoon Crypto Launcher",
        "latestVersionId": "k97dbjsaac58bkw0x00bktggdh80phep",
        "ownerUserId": "kn755k3hem246zvt1xd4kztr8s80hnhn",
        "slug": "moltmoon-agentcrypto-sdk",
        "stats": {
            "comments": 0,
            "downloads": 1598,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 3
        },
        "summary": "Complete OpenClaw-ready operating skill for @moltmoon\/sdk V2. Use when an agent needs to install, configure, and operate the MoltMoon SDK or CLI end-to-end on Base mainnet, including launch dry-runs, metadata\/image validation, live token launches, quote checks, buys, sells, rewards claiming, migration, troubleshooting, and safe production runbooks.",
        "tags": {
            "ai crypto": "k97dbjsaac58bkw0x00bktggdh80phep",
            "crypto": "k97dya0awfpxznccg9y8qgsbz580hm8g",
            "latest": "k97dbjsaac58bkw0x00bktggdh80phep",
            "launch tokens": "k97dbjsaac58bkw0x00bktggdh80phep",
            "moltmoon.ai": "k97dbjsaac58bkw0x00bktggdh80phep",
            "pumpfun": "k97dbjsaac58bkw0x00bktggdh80phep",
            "token launch": "k97dbjsaac58bkw0x00bktggdh80phep",
            "trading": "k97dya0awfpxznccg9y8qgsbz580hm8g"
        },
        "updatedAt": 1774322505427
    }
}