55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill largely does what its description says (scanning and executing Binance Earn and margin flows) and only asks for Binance API credentials, but there are technical/instruction mismatches and re...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773644199244,
        "_id": "k97e77mkjsc311dds548jtjah58318xe",
        "changelog": "Version 0.7.0 summary: Streamlined routing, clarified tool docs, and revised scan workflows.\n\n- Updated scan and routing logic to simplify user interaction triggers and outputs.\n- Clarified distinctions between official Binance skills and local scripts, and restricted Spot usage to price queries only.\n- Updated tool documentation for accuracy and removed outdated details on script usage and error handling.\n- Revised user setup and scan.md to consolidate all scan logic, including borrow-to-earn and scoring\/sorting of opportunities.\n- Adjusted instructions and paths for user setup, scanning, and profile management.",
        "changelogSource": "auto",
        "createdAt": 1773644199244,
        "parsed": {
            "clawdis": {
                "requires": {
                    "env": [
                        "BINANCE_API_KEY",
                        "BINANCE_API_SECRET"
                    ]
                }
            }
        },
        "version": "0.7.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "pipi6688",
        "handle": "pipi6688",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/205384959?v=4",
        "kind": "user",
        "linkedUserId": "kn772tnc7fnrk7fe7y2w7qj4en82yj8d"
    },
    "ownerHandle": "pipi6688",
    "skill": {
        "_creationTime": 1773583350168,
        "_id": "kd7agzqemnj6j1s19g9jbsr09982zjzg",
        "badges": [],
        "createdAt": 1773583350168,
        "displayName": "Passive Income Claw",
        "latestVersionId": "k97e77mkjsc311dds548jtjah58318xe",
        "ownerUserId": "kn772tnc7fnrk7fe7y2w7qj4en82yj8d",
        "slug": "passive-income-claw",
        "stats": {
            "comments": 0,
            "downloads": 148,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 7
        },
        "summary": "Binance passive income AI assistant. Automatically scans Binance earn opportunities, pushes matching opportunities based on user preferences, and executes su...",
        "tags": {
            "latest": "k97e77mkjsc311dds548jtjah58318xe"
        },
        "updatedAt": 1774334360464
    }
}