65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The SKILL.md clearly expects OKX API credentials and installing an npm CLI, but the registry metadata does not declare those requirements; this mismatch and the fact the skill can execute real trades ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774238589399,
        "_id": "k97bxe8svew9vmrvf6md8ez4g183fc9c",
        "changelog": "No changes detected in this release.\n\n- Version 1.2.6 has no file or documentation changes compared to the previous version.",
        "changelogSource": "user",
        "createdAt": 1774238589399,
        "version": "1.2.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "numpy0001",
        "handle": "numpy0001",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/140434355?v=4",
        "kind": "user",
        "linkedUserId": "kn7epfnzv0jwksjv959822xnmx82hnep"
    },
    "ownerHandle": "numpy0001",
    "skill": {
        "_creationTime": 1773113485891,
        "_id": "kd79g8dccjhb00kcg9hmhfybbs82m0a7",
        "badges": [],
        "createdAt": 1773113485891,
        "displayName": "okx-cex-trade",
        "latestVersionId": "k97bxe8svew9vmrvf6md8ez4g183fc9c",
        "ownerUserId": "kn7epfnzv0jwksjv959822xnmx82hnep",
        "slug": "okx-cex-trade",
        "stats": {
            "comments": 0,
            "downloads": 337,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 0,
            "versions": 4
        },
        "summary": "This skill should be used when the user asks to 'buy BTC', 'sell ETH', 'place a limit order', 'place a market order', 'cancel my order', 'amend my order', 'l...",
        "tags": {
            "latest": "k97bxe8svew9vmrvf6md8ez4g183fc9c"
        },
        "updatedAt": 1774331179901
    }
}