47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's purpose (an autonomous Hedera DeFi agent) matches the credentials it requests, but the runtime claims (launch.sh, installing 'uv', and running a Python CLI) conflict with the package conte...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774115662331,
        "_id": "k9763j5ymaapevadde4jgmqemn83bbf5",
        "changelog": "**pacman-hedera 5.0.1 Changelog**\n\n- Added `primaryEnv`, `requires.env`, and `configPaths` metadata for improved runtime\/environment clarity.\n- Updated skill description block to document runtime launcher behavior, env file enforcement, and credential scope.\n- Enhanced Autonomy Policy: clarified difference between read and write ops and the confirmation flow.\n- No functional changes to previous core logic or user interaction flows.\n- No code or operational changes—documentation and metadata only.",
        "changelogSource": "user",
        "createdAt": 1774115662331,
        "parsed": {
            "clawdis": {
                "emoji": "🟡",
                "os": [
                    "darwin",
                    "linux"
                ],
                "primaryEnv": "PRIVATE_KEY",
                "requires": {
                    "anyBins": [
                        "python3",
                        "python"
                    ],
                    "env": [
                        "PRIVATE_KEY",
                        "HEDERA_ACCOUNT_ID",
                        "PACMAN_NETWORK"
                    ]
                }
            }
        },
        "version": "5.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Chris0x88",
        "handle": "chris0x88",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/242740562?v=4",
        "kind": "user",
        "linkedUserId": "kn77znx2a1ztdx6b5r4aq0681n83bmnm"
    },
    "ownerHandle": "chris0x88",
    "skill": {
        "_creationTime": 1774114714337,
        "_id": "kd74y24x36yqqsg5sdfzkvq6kd83ac2g",
        "badges": [],
        "createdAt": 1774114714337,
        "displayName": "Pacman Hedera DeFi AI Agent",
        "latestVersionId": "k9763j5ymaapevadde4jgmqemn83bbf5",
        "ownerUserId": "kn77znx2a1ztdx6b5r4aq0681n83bmnm",
        "slug": "pacman-hedera",
        "stats": {
            "comments": 1,
            "downloads": 30,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "Autonomous AI agent for DeFi on Hedera — natural language trading, portfolio management, Power Law BTC rebalancing, HCS signal publishing, limit orders, stak...",
        "tags": {
            "latest": "k9763j5ymaapevadde4jgmqemn83bbf5"
        },
        "updatedAt": 1774118809698
    }
}