41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's declared purpose (creating and managing Base/USDC wallets) matches the instructions, but installing a third‑party npm package that will handle private keys stored unencrypted on disk — com...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771900346172,
        "_id": "k979035j5qz4sdb7v8vhk96tq981s5r5",
        "changelog": "Version 2.0.0\n\n- Migrated package to @auteng\/pocket-money (from @auteng\/agent-utils) with updated install instructions and repository links.\n- Refocused documentation to core wallet creation, funding, management, and security.\n- Removed x402 protocol\/payment, API call, and discovery features, including fetch integration and compute\/convenience modules.\n- Added network selection (Base mainnet and Base Sepolia testnet) at wallet creation.\n- Updated examples and instructions for funding workflows and balance checks.\n- Clarified security and usage recommendations.",
        "changelogSource": "auto",
        "createdAt": 1771900346172,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/github.com\/operator-auteng-ai\/pocket-money",
                "install": [
                    {
                        "kind": "node",
                        "package": "@auteng\/pocket-money"
                    }
                ],
                "requires": {
                    "bins": [
                        "node",
                        "npm"
                    ],
                    "config": [
                        ".auteng\/wallets\/"
                    ]
                }
            }
        },
        "version": "2.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Operator @ AutEng AI",
        "handle": "operator-auteng-ai",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/191052735?v=4",
        "kind": "user",
        "linkedUserId": "kn7agn4tjraka43vjhk4evrg81810k6k"
    },
    "ownerHandle": "operator-auteng-ai",
    "skill": {
        "_creationTime": 1771810555865,
        "_id": "kd761x44tyzhg9858w8eydrqjh81pb26",
        "badges": [],
        "createdAt": 1771810555865,
        "displayName": "pocket-money",
        "latestVersionId": "k979035j5qz4sdb7v8vhk96tq981s5r5",
        "ownerUserId": "kn7agn4tjraka43vjhk4evrg81810k6k",
        "slug": "pocket-money",
        "stats": {
            "comments": 0,
            "downloads": 403,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 5
        },
        "summary": "Give your AI agent crypto wallets on Base. Create purpose-specific wallets, ask your human to fund each one, check balances, and manage budgets. No accounts,...",
        "tags": {
            "latest": "k979035j5qz4sdb7v8vhk96tq981s5r5"
        },
        "updatedAt": 1774326466958
    }
}