41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it claims (paid micro-call DeFi utilities) but there are important inconsistencies and risks — notably a requirement to provide a private wallet key to a runtime that will n...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770834418506,
        "_id": "k97dnc4nnvh9306bkx7n8pqfmx80y10z",
        "changelog": "**Expanded to 27 tools across DeFi, DEX swaps, bridges, social, on-chain data, and more.**\n\n- Added DEX swap and cross-chain bridge tools, powered by Li.Fi aggregator, supporting 12 networks.\n- Introduced comprehensive on-chain token data, pool search, and trending token analytics.\n- Integrated full Twitter\/X toolset: tweet\/post, user\/tweet search, and profile lookup.\n- Improved wallet security language: recommends dedicated wallets and clarifies private key usage.\n- Updated pricing for some tools and clarified per-call costs, especially for new features.\n- New homepage, repository links, and open source guarantees included in documentation.",
        "changelogSource": "user",
        "createdAt": 1770834418506,
        "version": "1.0.8"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "foodaka",
        "handle": "foodaka",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8342048?v=4",
        "kind": "user",
        "linkedUserId": "kn730ktzg20xx1pv1n6aqkbmbn80p1h1"
    },
    "ownerHandle": "foodaka",
    "skill": {
        "_creationTime": 1770483191669,
        "_id": "kd73p1spx97cx00r4913e6tyxh80ppqk",
        "badges": [],
        "createdAt": 1770483191669,
        "displayName": "Paytoll",
        "latestVersionId": "k97dnc4nnvh9306bkx7n8pqfmx80y10z",
        "ownerUserId": "kn730ktzg20xx1pv1n6aqkbmbn80p1h1",
        "slug": "paytoll",
        "stats": {
            "comments": 0,
            "downloads": 1240,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 3,
            "versions": 2
        },
        "summary": "27 tools for DeFi, DEX swaps, cross-chain bridges, Twitter\/X, on-chain token data, crypto utilities, and LLM access via x402 micro-payments on Base. No API keys needed — payment is the auth.",
        "tags": {
            "latest": "k97dnc4nnvh9306bkx7n8pqfmx80y10z"
        },
        "updatedAt": 1774323205336
    }
}