41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's description (Solana wallet ops, signing, vanity generation) matches its SKILL.md, but the SKILL.md asserts specific JS libraries, runtime behavior, and secure handling without supplying co...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772151207039,
        "_id": "k9799hxp3meep8szc0dhg1vsk981z6sq",
        "changelog": "Initial release of Pump MCP Server providing Solana wallet tooling over Model Context Protocol.\n\n- Exposes 7 wallet-related tools: keypair and vanity generation, signature operations, address validation, and keypair restoration.\n- Offers 3 resource types for session keypair info, keypair lookup, and address validation details.\n- Includes 3 prompts to guide wallet creation, vanity address setup, and security review.\n- All operations occur over stdio transport with strict session keypair state management.\n- Designed for secure, ephemeral usage — with input validation and no exposure of secret keys.",
        "changelogSource": "auto",
        "createdAt": 1772151207039,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/github.com\/nirholas\/pump-fun-sdk"
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "speraxos",
        "handle": "speraxos",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/220422846?v=4",
        "kind": "user",
        "linkedUserId": "kn7dken7vmx6t21t5gd06hj5ns7zzerb"
    },
    "ownerHandle": "speraxos",
    "skill": {
        "_creationTime": 1772151207039,
        "_id": "kd73gbzk6br9yaqex5n380hczh81yf0k",
        "badges": [],
        "createdAt": 1772151207039,
        "displayName": "Pump MCP Server",
        "latestVersionId": "k9799hxp3meep8szc0dhg1vsk981z6sq",
        "ownerUserId": "kn7dken7vmx6t21t5gd06hj5ns7zzerb",
        "slug": "pump-mcp-server",
        "stats": {
            "comments": 0,
            "downloads": 283,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Model Context Protocol server exposing 7 tools, 3 resource types, and 3 prompts for AI agent consumption — Solana wallet operations, vanity address generatio...",
        "tags": {
            "latest": "k9799hxp3meep8szc0dhg1vsk981z6sq"
        },
        "updatedAt": 1774327422505
    }
}