59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match a Privy wallet integration (it legitimately needs Privy credentials), but the published metadata omits required sensitive environment variables and the runtime instructi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770236833117,
        "_id": "k972nj247vf7d829gcjczfgqgx80hgy0",
        "changelog": "- Major security upgrade: mandatory security rules, validation checklist, and strict policy enforcement for all wallet operations.\n- Added references\/security.md with step-by-step guides and checklists to prevent unauthorized actions, prompt injection, and accidental fund loss.\n- Policy deletion and rule removal now require explicit verbal user confirmation—agents must confirm and explain the risks before proceeding.\n- Wallets can only be created with an attached policy; unsecured wallets are disallowed.\n- Updated documentation throughout with security warnings, protected actions, and anti-abuse prompts for all onchain activity.",
        "changelogSource": "user",
        "createdAt": 1770236833117,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "tedim52",
        "handle": "tedim52",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/46531991?v=4",
        "kind": "user",
        "linkedUserId": "kn7ac353mtzv4s8e7q9ez9p70d80d3qq"
    },
    "ownerHandle": "tedim52",
    "skill": {
        "_creationTime": 1770173427307,
        "_id": "kd746prewz8v0gb9p5w7jvgnjh80he1k",
        "badges": [],
        "createdAt": 1770173427307,
        "displayName": "Privy Agentic Wallets",
        "latestVersionId": "k972nj247vf7d829gcjczfgqgx80hgy0",
        "ownerUserId": "kn7ac353mtzv4s8e7q9ez9p70d80d3qq",
        "slug": "privy",
        "stats": {
            "comments": 0,
            "downloads": 1826,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 3,
            "versions": 2
        },
        "summary": "Create and manage agentic wallets with Privy. Use for autonomous onchain transactions, wallet creation, policy management, and transaction execution on Ethereum, Solana, and other chains. Triggers on requests involving crypto wallets for AI agents, server-side wallet operations, or autonomous transaction execution.",
        "tags": {
            "latest": "k972nj247vf7d829gcjczfgqgx80hgy0"
        },
        "updatedAt": 1772249167429
    }
}