37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code generally matches a Polymarket market-maker, but it reads sensitive environment variables (wallet private key), fails to declare them in metadata or runtime docs, and advertises an au...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773652280575,
        "_id": "k97e00efa71rc0a0pmdq7nwh8x831sf3",
        "changelog": "Initial release of polymarket-maker skill:\n\n- Launches continuous static market making for Polymarket 5-minute binary markets.\n- Simultaneously places limit sell orders for both UP and DOWN tokens at a fixed price of $0.52.\n- Supports trading across multiple assets (BTC, ETH, SOL, XRP).\n- Includes an automated 8% stop-loss to halt trading on excessive drawdown.\n- Provides example commands for running the skill in the background with Node.js.",
        "changelogSource": "user",
        "createdAt": 1773652280575,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "thony32",
        "handle": "thony32",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/87388322?v=4",
        "kind": "user",
        "linkedUserId": "kn70dhxg0wh42rx6gdns8rh2c582qf9g"
    },
    "ownerHandle": "thony32",
    "skill": {
        "_creationTime": 1773652280575,
        "_id": "kd76pwdaf09gadkf0d758028hd831758",
        "badges": [],
        "createdAt": 1773652280575,
        "displayName": "Polymarket Cryptos Maker 5m",
        "latestVersionId": "k97e00efa71rc0a0pmdq7nwh8x831sf3",
        "ownerUserId": "kn70dhxg0wh42rx6gdns8rh2c582qf9g",
        "slug": "polymarket-maker",
        "stats": {
            "comments": 0,
            "downloads": 93,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Continuous Static Market Making execution skill for Polymarket. Sells BOTH sides of 5-minute binary markets at $0.52. Features multi-asset support and an aut...",
        "tags": {
            "latest": "k97e00efa71rc0a0pmdq7nwh8x831sf3"
        },
        "updatedAt": 1774335093443
    }
}