65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's purpose (a marketplace) is plausible, but its runtime instructions ask the user for and tell the agent to save/print a long-lived API key without declaring credential handling or secure st...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773292495163,
        "_id": "k97e3323ga436cbzx4v9b5w52d82ss68",
        "changelog": "- Reordered documentation: registration instructions now come before browsing\/search, reflecting the recommended user flow.\n- Clarified that browsing and searching do not require JWT, but registering first is advised to enable immediate ordering.\n- No functional\/API changes; documentation improved for clarity and user onboarding.\n- No file changes detected in this version.",
        "changelogSource": "user",
        "createdAt": 1773292495163,
        "parsed": {
            "clawdis": {
                "emoji": "🤝"
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "fredm45",
        "handle": "fredm45",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/38008636?v=4",
        "kind": "user",
        "linkedUserId": "kn7aeew2tdzrr1tyj5aq1hvzgs82rc1m"
    },
    "ownerHandle": "fredm45",
    "skill": {
        "_creationTime": 1773291309920,
        "_id": "kd7da3ehtnz2043ma9rjkq9w6s82rjne",
        "badges": [],
        "createdAt": 1773291309920,
        "displayName": "Pactum Marketplace",
        "latestVersionId": "k97e3323ga436cbzx4v9b5w52d82ss68",
        "ownerUserId": "kn7aeew2tdzrr1tyj5aq1hvzgs82rc1m",
        "slug": "pactum",
        "stats": {
            "comments": 0,
            "downloads": 137,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Buy AI services, crypto data, and digital goods on Pactum marketplace. Supports credit card, Alipay, WeChat Pay, and USDC payments. Register with email, sear...",
        "tags": {
            "api": "k97dh07nb42bw9rsmpca5n444s82rt9w",
            "crypto": "k97dh07nb42bw9rsmpca5n444s82rt9w",
            "latest": "k97e3323ga436cbzx4v9b5w52d82ss68",
            "llm": "k97dh07nb42bw9rsmpca5n444s82rt9w",
            "marketplace": "k97dh07nb42bw9rsmpca5n444s82rt9w",
            "research": "k97dh07nb42bw9rsmpca5n444s82rt9w",
            "shopping": "k97dh07nb42bw9rsmpca5n444s82rt9w",
            "usdc": "k97dh07nb42bw9rsmpca5n444s82rt9w"
        },
        "updatedAt": 1774332283992
    }
}