94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill's code, instructions, and required credentials are coherent with its stated purpose (MoonPay Commerce / Helio payment operations); it only needs API key/secret and uses curl/jq to call the d...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770808163040,
        "_id": "k97f93xg5vcyqek539hjdznjsd80zaf6",
        "changelog": "# Changelog\n\n## v0.3.0\n\n### Security\n\n- **Input sanitization for all user-supplied arguments in `helio.sh`**\n  - Added `validate_input` function that rejects values containing shell metacharacters, URL-unsafe characters, and path traversal sequences (`..`)\n  - Allowlist: `a-zA-Z0-9._@:\/-` — covers Helio IDs, currency symbols, wallet addresses, and decimal amounts\n  - Validated arguments: `symbol` (currency-id, create-paylink), `amount` (create-paylink), `paylink_id` (charge, transactions, disable, enable)\n  - Mitigates URL path traversal and terminal output injection when arguments are interpolated into curl URLs and echo statements\n  - Addresses code scanner findings from v0.2.0 review",
        "changelogSource": "user",
        "createdAt": 1770808163040,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "jq",
                        "curl"
                    ],
                    "env": [
                        "HELIO_API_KEY",
                        "HELIO_API_SECRET"
                    ]
                }
            }
        },
        "version": "0.3.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "mavagio",
        "handle": "mavagio",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7386708?v=4",
        "kind": "user",
        "linkedUserId": "kn7db753rc21pz8ymc0vqafhxx803de6"
    },
    "ownerHandle": "mavagio",
    "skill": {
        "_creationTime": 1769635701274,
        "_id": "kd7156tbfjx6m8xxpw5nt84h9x803mcx",
        "badges": [],
        "createdAt": 1769635701274,
        "displayName": "MoonPay Commerce (Helio) Accept Crypto Payments",
        "latestVersionId": "k97f93xg5vcyqek539hjdznjsd80zaf6",
        "ownerUserId": "kn7db753rc21pz8ymc0vqafhxx803de6",
        "slug": "mpc-accept-crypto-payments",
        "stats": {
            "comments": 0,
            "downloads": 1613,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 3
        },
        "summary": "Accept crypto payments on Solana via MoonPay Commerce (formerly Helio). Create Pay Links, generate checkout URLs, check transactions, and list supported currencies. Use when the user wants to accept crypto payments, create payment links, charge for products\/services with crypto, or query payment transactions. Requires a MoonPay Commerce account with API key and secret.",
        "tags": {
            "latest": "k97f93xg5vcyqek539hjdznjsd80zaf6"
        },
        "updatedAt": 1772054435893
    }
}