65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it claims (read-only Moralis EVM reads via uxc), but its published metadata omits the API-key credential the runtime instructions require, which is an incoherence users sh...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773626238812,
        "_id": "k979m1qm9rbh515esqm1xdh8an831ayv",
        "changelog": "Initial release of the Moralis OpenAPI skill:\n\n- Enables read-only EVM wallet and token data operations via Moralis API through UXC using a curated OpenAPI schema.\n- Requires API key authentication and includes setup for credential and binding management.\n- Provides command-line guidance for common wallet balance, token, history, swap, net worth, metadata, and price queries.\n- Adds operational guardrails for reliability and efficiency, emphasizing explicit chain selection and narrow queries.",
        "changelogSource": "auto",
        "createdAt": 1773626238812,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jolestar",
        "handle": "jolestar",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/77268?v=4",
        "kind": "user",
        "linkedUserId": "kn76v1w3vse2yfx3k4dkkbn9bd81xemv"
    },
    "ownerHandle": "jolestar",
    "skill": {
        "_creationTime": 1773626238812,
        "_id": "kd72v119mzsfea0vdxscd9hhp1830h7d",
        "badges": [],
        "createdAt": 1773626238812,
        "displayName": "Moralis OpenAPI Skill",
        "latestVersionId": "k979m1qm9rbh515esqm1xdh8an831ayv",
        "ownerUserId": "kn76v1w3vse2yfx3k4dkkbn9bd81xemv",
        "slug": "moralis-openapi-skill",
        "stats": {
            "comments": 0,
            "downloads": 96,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Operate Moralis EVM wallet and token reads through UXC with a curated OpenAPI schema, API-key auth, and wallet-intelligence guardrails.",
        "tags": {
            "latest": "k979m1qm9rbh515esqm1xdh8an831ayv"
        },
        "updatedAt": 1774334673870
    }
}