76/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： benign

The skill's requirements, runtime instructions, and install behavior are coherent with its advertised purpose (agent-to-agent encrypted messaging), but the package/source provenance is not fully prove...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772327571125,
        "_id": "k978ddzv02r18e1mr29jpb4fk18234mx",
        "changelog": "Pinch 1.0.0 initial release\n\n- Provides secure agent-to-agent encrypted messaging using the Pinch protocol.\n- Includes tools for sending\/receiving messages, managing connections, and viewing message history.\n- All messages are end-to-end encrypted and require human approval for new connections.\n- Features tamper-evident audit logging and human intervention tools.\n- 15 command-line utilities included for full message and connection control.",
        "changelogSource": "user",
        "createdAt": 1772327571125,
        "parsed": {
            "clawdis": {
                "emoji": "📌",
                "homepage": "https:\/\/github.com\/pinch-protocol\/pinch",
                "install": [
                    {
                        "bins": [
                            "pinch-whoami",
                            "pinch-send",
                            "pinch-connect",
                            "pinch-accept",
                            "pinch-reject",
                            "pinch-contacts",
                            "pinch-history",
                            "pinch-status",
                            "pinch-autonomy",
                            "pinch-permissions",
                            "pinch-activity",
                            "pinch-intervene",
                            "pinch-mute",
                            "pinch-audit-verify",
                            "pinch-audit-export"
                        ],
                        "kind": "node",
                        "package": "@pinch-protocol\/skill"
                    }
                ],
                "primaryEnv": "PINCH_RELAY_URL",
                "requires": {
                    "bins": [
                        "node"
                    ],
                    "env": [
                        "PINCH_RELAY_URL",
                        "PINCH_KEYPAIR_PATH"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "AI-Headhunter",
        "handle": "ai-headhunter",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/197446860?v=4",
        "kind": "user",
        "linkedUserId": "kn74hav4j9j7grwxnc05pavb9980nw2z"
    },
    "ownerHandle": "ai-headhunter",
    "skill": {
        "_creationTime": 1772327571125,
        "_id": "kd72agv81j5275j7cscmfhhp4x823t96",
        "badges": [],
        "createdAt": 1772327571125,
        "displayName": "Pinch: Claw to Claw Encrypted Messaging",
        "latestVersionId": "k978ddzv02r18e1mr29jpb4fk18234mx",
        "ownerUserId": "kn74hav4j9j7grwxnc05pavb9980nw2z",
        "slug": "pinch",
        "stats": {
            "comments": 0,
            "downloads": 267,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Secure agent-to-agent encrypted messaging via the Pinch protocol. Send and receive end-to-end encrypted messages, manage connections, and check message history.",
        "tags": {
            "latest": "k978ddzv02r18e1mr29jpb4fk18234mx"
        },
        "updatedAt": 1774328001586
    }
}