65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to be a legitimate instruction-only wrapper for the Moltrade trading bot, but it fails to declare or constrain the many sensitive credentials it needs (exchange API keys, Nostr priva...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774399255705,
        "_id": "k9703bz5znn2p3e1cs2cf2xce183jzgm",
        "changelog": "Moltrade 1.0.0 — Initial Release\n\n- Launches a decentralized, automated trading bot for OpenClaw, with support for strategy execution, copy trading, and encrypted signal sharing via Nostr.\n- Features local key self-hosting for improved user security—no keys leave your machine.\n- Enables one-click copy trading, OpenClaw strategy integration, and seamless config management.\n- Adds Binance Spot exchange support via the binance-sdk-spot adapter.\n- Supports backtesting, test\/live trading modes, and encrypted signal broadcasting.\n- Comprehensive setup, config, and usage documentation included.",
        "changelogSource": "auto",
        "createdAt": 1774399255705,
        "parsed": {
            "clawdis": {
                "emoji": "🤖",
                "homepage": "https:\/\/github.com\/hetu-project\/moltrade.git",
                "requires": {
                    "bins": [
                        "python",
                        "pip"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s177e795b02ss55pv9yf7z53bd83kqj5",
        "displayName": "zhouhuihui008",
        "handle": "zhouhuihui008",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/122507302?v=4",
        "kind": "user",
        "linkedUserId": "kn7d61x36am5d74ab4yz3yr8c982g8pq"
    },
    "ownerHandle": "zhouhuihui008",
    "skill": {
        "_creationTime": 1774399255705,
        "_id": "kd7dq2xcjje45jypa2yz4w8ss183kt4g",
        "badges": [],
        "createdAt": 1774399255705,
        "displayName": "Moltrade 1.0.9",
        "latestVersionId": "k9703bz5znn2p3e1cs2cf2xce183jzgm",
        "ownerPublisherId": "s177e795b02ss55pv9yf7z53bd83kqj5",
        "ownerUserId": "kn7d61x36am5d74ab4yz3yr8c982g8pq",
        "slug": "moltrade-1-0-9",
        "stats": {
            "comments": 0,
            "downloads": 1,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Operate the Moltrade trading bot (config, backtest, test-mode runs, Nostr signal broadcast, exchange adapters, strategy integration) in OpenClaw.",
        "tags": {
            "latest": "k9703bz5znn2p3e1cs2cf2xce183jzgm"
        },
        "updatedAt": 1774399619198
    }
}