47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The instructions match a legitimate local wallet migration flow, but the declared environment requirements are inconsistent (requests NANSEN_API_KEY even though the runtime steps use NANSEN_WALLET_PAS...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773937007820,
        "_id": "k970x489sv9da5ff4chvjh0af1836md7",
        "changelog": "nansen-wallet-keychain-migration v0.1.0\n\n- Initial release supporting migration of nansen-cli wallet credentials from insecure storage (env files, .credentials) to a secure OS keychain.\n- Provides detailed detection steps and multiple migration paths based on how the password is currently stored.\n- Covers post-migration verification and cleanup instructions.\n- Includes guidance and safety rules to ensure passwords are never exposed or mishandled.\n- Documents handling of lost\/unrecoverable passwords and creating a new wallet.",
        "changelogSource": "auto",
        "createdAt": 1773937007820,
        "parsed": {
            "clawdis": {
                "install": [
                    {
                        "bins": [
                            "nansen"
                        ],
                        "kind": "node",
                        "package": "nansen-cli"
                    }
                ],
                "primaryEnv": "NANSEN_API_KEY",
                "requires": {
                    "bins": [
                        "nansen"
                    ],
                    "env": [
                        "NANSEN_API_KEY"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Nansen AI",
        "handle": "nansen-devops",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/93130718?v=4",
        "kind": "user",
        "linkedUserId": "kn767j341yf6ww7scrp9v08yss82j4z0"
    },
    "ownerHandle": "nansen-devops",
    "skill": {
        "_creationTime": 1773937007820,
        "_id": "kd7ed31vk8ymym535tbnj7ts29837pkz",
        "badges": [],
        "createdAt": 1773937007820,
        "displayName": "Nansen Wallet Keychain Migration",
        "latestVersionId": "k970x489sv9da5ff4chvjh0af1836md7",
        "ownerUserId": "kn767j341yf6ww7scrp9v08yss82j4z0",
        "slug": "nansen-wallet-keychain-migration",
        "stats": {
            "comments": 0,
            "downloads": 40,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Migrate an existing nansen-cli wallet from insecure password storage (env files, .credentials) to the new secure keychain-backed flow.",
        "tags": {
            "latest": "k970x489sv9da5ff4chvjh0af1836md7"
        },
        "updatedAt": 1773937313143
    }
}