41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions broadly match a Solana trading tool, but it asks the agent/user to fetch remote instruction files, register to receive extremely sensitive keys (privateKey + apiKey), and pers...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772020344201,
        "_id": "k97965es3868gx317dymssk45581vm27",
        "changelog": "- Initial release of the plugy Solana trading skill.\n- Allows AI agents to buy, sell, and create tokens across PumpFun, PumpSwap, LaunchLab, and Meteora.\n- Clear step-by-step instructions for registration, API key handling, and wallet management.\n- Structured documentation with separate files for each action (trade, create, heartbeat, security rules).\n- Emphasizes API key security and correct file usage for all trading actions.",
        "changelogSource": "user",
        "createdAt": 1772020344201,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "QualityDude",
        "handle": "qualitydude",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/39985226?v=4",
        "kind": "user",
        "linkedUserId": "kn76xq5g87edqq07kxp3h6kyyd81tyt5"
    },
    "ownerHandle": "qualitydude",
    "skill": {
        "_creationTime": 1772020344201,
        "_id": "kd7bxsqhcachsrq1f1zeb4xjkh81v0bv",
        "badges": [],
        "createdAt": 1772020344201,
        "displayName": "plugy",
        "latestVersionId": "k97965es3868gx317dymssk45581vm27",
        "ownerUserId": "kn76xq5g87edqq07kxp3h6kyyd81tyt5",
        "slug": "plugy",
        "stats": {
            "comments": 0,
            "downloads": 334,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Solana trading skill for AI agents. Buy, sell, and create tokens across PumpFun, PumpSwap, LaunchLab, and Meteora.",
        "tags": {
            "latest": "k97965es3868gx317dymssk45581vm27"
        },
        "updatedAt": 1774327036681
    }
}