41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it says (local data storage and local CLI scripts) but its documentation claims 'no data is sent to any server' while the shipped scripts call external services (Binance, Co...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771837200604,
        "_id": "k97e5xyey6j71caps8pc65s01h81p0km",
        "changelog": "Initial release of the local portfolio tracker skill:\n\n- Track and manage investment portfolios fully locally; all data stored in `~\/.portfolio-tracker\/`.\n- TypeScript CLI tools for data management, price fetching, and account syncing (Binance, IBKR, EVM wallets).\n- Modular architecture with clear data and config separation.\n- Supports asset price refresh, exchange rate updates, and historical data lookups.\n- Sync investment data from major crypto exchanges, brokers, and blockchain wallets.\n- User commands for portfolio viewing, price updates, account setup, syncing, and requesting investment advice.",
        "changelogSource": "user",
        "createdAt": 1771837200604,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "aigeneralstore",
        "handle": "aigeneralstore",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/216262123?v=4",
        "kind": "user",
        "linkedUserId": "kn78n3p8sa65jp0kx8v60m3san819srb"
    },
    "ownerHandle": "aigeneralstore",
    "skill": {
        "_creationTime": 1771837200604,
        "_id": "kd7de7gtk38g1c0a9kjnyahr8h81qf46",
        "badges": [],
        "createdAt": 1771837200604,
        "displayName": "portfolio tracking",
        "latestVersionId": "k97e5xyey6j71caps8pc65s01h81p0km",
        "ownerUserId": "kn78n3p8sa65jp0kx8v60m3san819srb",
        "slug": "portfolio-tracking-skill",
        "stats": {
            "comments": 0,
            "downloads": 370,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 1
        },
        "summary": "An investment portfolio tracker that runs entirely locally. All data stays in ~\/.portfolio-tracker\/.",
        "tags": {
            "latest": "k97e5xyey6j71caps8pc65s01h81p0km"
        },
        "updatedAt": 1774326528901
    }
}