59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill largely matches an MCP tool that declares agent identity to PayClaw, but there are several internal inconsistencies (env var requirements, README vs code behavior, manifest vs files) and beh...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772685229918,
        "_id": "k97790qpcrpqavb3z1w1hwekx982anvy",
        "changelog": "**payclaw-badge 0.5.1**\n\n- Updated to require PAYCLAW_API_KEY for usage; device-based auth no longer default.\n- Setup instructions and README clarified to reflect API key requirement and where to obtain it.\n- Added notes on minimum Node.js version (20+ required).\n- Expanded Security & Privacy section with clear credential and data practices.",
        "changelogSource": "auto",
        "createdAt": 1772685229918,
        "parsed": {
            "clawdis": {
                "emoji": "🛡️",
                "requires": {
                    "bins": [
                        "npx"
                    ]
                }
            }
        },
        "version": "0.5.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "PayClaw, Inc.",
        "handle": "payclawinc",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/254987600?v=4",
        "kind": "user",
        "linkedUserId": "kn7e4c5zx42g2xytjsq3zr15bd81j27g"
    },
    "ownerHandle": "payclawinc",
    "skill": {
        "_creationTime": 1772304636795,
        "_id": "kd785xg7dg9zww42erepf8wrs5820heb",
        "badges": [],
        "createdAt": 1772304636795,
        "displayName": "Payclaw Badge Pub",
        "latestVersionId": "k97790qpcrpqavb3z1w1hwekx982anvy",
        "ownerUserId": "kn7e4c5zx42g2xytjsq3zr15bd81j27g",
        "slug": "payclaw-badge",
        "stats": {
            "comments": 0,
            "downloads": 294,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 5
        },
        "summary": "Agents are not bots. Prove it. UCP Credential Provider: declare your agent as an authorized actor before shopping at any UCP-compliant merchant. Requires PAY...",
        "tags": {
            "latest": "k97790qpcrpqavb3z1w1hwekx982anvy"
        },
        "updatedAt": 1772685260982
    }
}