65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The SKILL.md clearly expects OKX API credentials and installing an npm CLI, but the registry metadata does not declare those requirements; this mismatch and the fact the skill can execute real trades ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774622900146,
        "_id": "k975wcc97253avz45w54bvz22d83pdyk",
        "changelog": "okx-cex-trade v1.2.7\n\n- Updated sz (size) handling for derivatives: SWAP and FUTURES orders now accept direct USDT amounts via --tgtCcy quote_ccy, passing the amount as --sz for automatic contract conversion by API.\n- Clarified that for options orders, manual USDT-to-contract conversion is still required, and detailed step-by-step guidance is provided.\n- Ambiguous plain number sz from user (no unit) now consistently prompts clarification before proceeding.\n- Improved and simplified contract type handling and user confirmation flows for derivatives and options order sizing.",
        "changelogSource": "auto",
        "createdAt": 1774622900146,
        "version": "1.2.7"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s178zmefrdp1qc0dd9ya8n367183pmvz",
        "displayName": "numpy0001",
        "handle": "numpy0001",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/140434355?v=4",
        "kind": "user",
        "linkedUserId": "kn7epfnzv0jwksjv959822xnmx82hnep"
    },
    "ownerHandle": "numpy0001",
    "skill": {
        "_creationTime": 1773113485891,
        "_id": "kd79g8dccjhb00kcg9hmhfybbs82m0a7",
        "badges": [],
        "createdAt": 1773113485891,
        "displayName": "okx-cex-trade",
        "latestVersionId": "k975wcc97253avz45w54bvz22d83pdyk",
        "ownerPublisherId": "s178zmefrdp1qc0dd9ya8n367183pmvz",
        "ownerUserId": "kn7epfnzv0jwksjv959822xnmx82hnep",
        "slug": "okx-cex-trade",
        "stats": {
            "comments": 0,
            "downloads": 426,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 0,
            "versions": 5
        },
        "summary": "This skill should be used when the user asks to 'buy BTC', 'sell ETH', 'place a limit order', 'place a market order', 'cancel my order', 'amend my order', 'l...",
        "tags": {
            "latest": "k975wcc97253avz45w54bvz22d83pdyk"
        },
        "updatedAt": 1774763809859
    }
}