65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's instructions are coherent with manual arbitration, but the published metadata omits sensitive requirements (nla CLI, PRIVATE_KEY, and optional LLM API keys), creating an inconsistency you ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773232069431,
        "_id": "k9707yxgv12h71ffmrn14ax2y182pn71",
        "changelog": "nla-arbitrate 1.0.0 — Initial release\n\n- Introduces manual arbitration for NLA escrow fulfillments, as an alternative to automated oracles.\n- Supports both interactive (manual review\/decision) and auto (LLM-based) arbitration modes.\n- Allows scanning for all pending arbitration requests where the user is the oracle.\n- Requires nla CLI, a funded Ethereum wallet, and LLM API keys for auto mode.\n- On-chain arbitration decisions are recorded as attestations.",
        "changelogSource": "auto",
        "createdAt": 1773232069431,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "疒奀",
        "handle": "mlegls",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/46226846?v=4",
        "kind": "user",
        "linkedUserId": "kn72xcemvtth7cpg4k3ypetprd81envr"
    },
    "ownerHandle": "mlegls",
    "skill": {
        "_creationTime": 1773232069431,
        "_id": "kd7881mv882e3wsv2mc62080vd82pj75",
        "badges": [],
        "createdAt": 1773232069431,
        "displayName": "Nla Arbitrate",
        "latestVersionId": "k9707yxgv12h71ffmrn14ax2y182pn71",
        "ownerUserId": "kn72xcemvtth7cpg4k3ypetprd81envr",
        "slug": "nla-arbitrate",
        "stats": {
            "comments": 0,
            "downloads": 130,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Manually arbitrate NLA escrow fulfillments as an alternative to the automated oracle. Use when the user wants to review pending arbitration requests, evaluat...",
        "tags": {
            "arkhai": "k9707yxgv12h71ffmrn14ax2y182pn71",
            "blockchain": "k9707yxgv12h71ffmrn14ax2y182pn71",
            "escrow": "k9707yxgv12h71ffmrn14ax2y182pn71",
            "latest": "k9707yxgv12h71ffmrn14ax2y182pn71"
        },
        "updatedAt": 1774331950387
    }
}