37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's purpose (paying for AI services) is plausible, but the package auto-installs a global npm CLI, auto-initializes a local wallet (storing keys in ~/.moltspay), and the package metadata does ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774306850713,
        "_id": "k974fvabe0nd3ev8hk61722w1s83fpc7",
        "changelog": "MoltsPay Skill version 1.0.0\n\n- Simplified wallet model: Only Base chain is now supported (USDC, gasless).\n- Updated all commands and instructions to focus on single-chain usage.\n- New API-driven service discovery via moltspay.com endpoints.\n- Streamlined provider and service table formatting for user-facing outputs.\n- Removed references to multi-chain, tokens, and QR code funding flows.\n- Improved error handling and funding instructions for clarity.",
        "changelogSource": "auto",
        "createdAt": 1774306850713,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s170f6c8wzdrke438y8x7kz38d83ftrt",
        "displayName": "Yaqing2023",
        "handle": "yaqing2023",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/130617529?v=4",
        "kind": "user",
        "linkedUserId": "kn7fs4ht5k1fdxw8k1de1v2gxd82q2q4"
    },
    "ownerHandle": "yaqing2023",
    "skill": {
        "_creationTime": 1773250977121,
        "_id": "kd7977ftg6aze1yfw2cyxbsx3582qq8e",
        "badges": [],
        "createdAt": 1773250977121,
        "displayName": "MoltsPay Skill",
        "latestVersionId": "k974fvabe0nd3ev8hk61722w1s83fpc7",
        "ownerPublisherId": "s170f6c8wzdrke438y8x7kz38d83ftrt",
        "ownerUserId": "kn7fs4ht5k1fdxw8k1de1v2gxd82q2q4",
        "slug": "moltspay-skill",
        "stats": {
            "comments": 0,
            "downloads": 241,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 5
        },
        "summary": "Pay for and use AI services via MoltsPay protocol. Trigger: User asks to generate video, use a paid service, etc. Auto-discovers services from \/.well-known\/a...",
        "tags": {
            "AI Agent": "k970hehf179gmvqavkyjqqaf3982sqdv",
            "Agentic Wallet": "k970hehf179gmvqavkyjqqaf3982sqdv",
            "Multi Chain": "k970hehf179gmvqavkyjqqaf3982sqdv",
            "Payment": "k970hehf179gmvqavkyjqqaf3982sqdv",
            "USDC": "k970hehf179gmvqavkyjqqaf3982sqdv",
            "latest": "k974fvabe0nd3ev8hk61722w1s83fpc7"
        },
        "updatedAt": 1774332068616
    }
}