41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally matches a Solana DeFi broker's needs, but there are small mismatches in the declared vs. referenced environment variables and the skill asks for highly sensitive secrets (wallet ke...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772608534229,
        "_id": "k976zb5batsf4mqhf46b961339828v8k",
        "changelog": "- Added security notice: explicitly require a dedicated wallet keypair for signing transactions; never use your main private key.\n- Clarified that the agent will always ask for user confirmation before signing.\n- Expanded supported environment variables for Solana RPC URLs and Jupiter API keys (now recognizes SOLANA_RPC_URL, HELIUS_RPC_URL, JUP_API_KEY).\n- Updated credential collection steps to reflect new environment variable priorities and naming.\n- Read-only operations now clearer: no keypair required.\n- Minor clarifications throughout to improve safety and user guidance.",
        "changelogSource": "user",
        "createdAt": 1772608534229,
        "parsed": {
            "clawdis": {
                "primaryEnv": "RPC_URL",
                "requires": {
                    "env": [
                        "RPC_URL",
                        "WALLET_KEYPAIR",
                        "WALLET_ADDRESS",
                        "P0_ACCOUNT",
                        "JUPITER_API_KEY"
                    ]
                }
            }
        },
        "version": "2.2.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Borcherd van Brakell",
        "handle": "borcherd",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32452429?v=4",
        "kind": "user",
        "linkedUserId": "kn71pma2qewcrchd9t0zz9k6qd828g3b"
    },
    "ownerHandle": "borcherd",
    "skill": {
        "_creationTime": 1772603356326,
        "_id": "kd796gq2c94hdc7fhgkejthsas82825s",
        "badges": [],
        "createdAt": 1772603356326,
        "displayName": "Project 0 - DeFi Native Prime Broker",
        "latestVersionId": "k976zb5batsf4mqhf46b961339828v8k",
        "ownerUserId": "kn71pma2qewcrchd9t0zz9k6qd828g3b",
        "slug": "project-0",
        "stats": {
            "comments": 0,
            "downloads": 247,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 6
        },
        "summary": "Permissionless DeFi yield and credit on Solana via the Project 0 (P0) protocol. Deposit funds to earn yield across Solana's highest-yielding venues. Borrow s...",
        "tags": {
            "latest": "k976zb5batsf4mqhf46b961339828v8k"
        },
        "updatedAt": 1774328978476
    }
}