41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it says (on‑chain trading and calling a billing API) but there are multiple inconsistencies and risky requirements (exporting a private key, undisclosed env vars in registry...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772729473389,
        "_id": "k979sxqphw6hwg39m477nvd89h82amha",
        "changelog": "- No file changes detected in this version.\n- Documentation and metadata, including version number in SKILL.md, remain the same as the previous release.\n- No new features, bug fixes, or content updates included.",
        "changelogSource": "auto",
        "createdAt": 1772729473389,
        "version": "7.1.5"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "BOB-Z-PRO",
        "handle": "bob-z-pro",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/152723697?v=4",
        "kind": "user",
        "linkedUserId": "kn775pza4vthw3758w9t6562y98250y5"
    },
    "ownerHandle": "bob-z-pro",
    "skill": {
        "_creationTime": 1772679969095,
        "_id": "kd79bskr5gck24rrw8scwevkpd82adct",
        "badges": [],
        "createdAt": 1772679969095,
        "displayName": "Polymarket Arbitrage Pro",
        "latestVersionId": "k979sxqphw6hwg39m477nvd89h82amha",
        "ownerUserId": "kn775pza4vthw3758w9t6562y98250y5",
        "slug": "polymarket-arbitrage-pro",
        "stats": {
            "comments": 0,
            "downloads": 282,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 20
        },
        "summary": "Polymarket预测市场套利工具。自动检测并执行套利交易，每次调用自动扣费。",
        "tags": {
            "latest": "k979sxqphw6hwg39m477nvd89h82amha"
        },
        "updatedAt": 1774329335663
    }
}