59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code implements a legitimate Questrade integration, but the package/registry metadata omits the sensitive credentials it requires (refresh token) and some runtime behavior (writing rotated...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772654471496,
        "_id": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
        "changelog": "Initial release",
        "changelogSource": "user",
        "createdAt": 1772654471496,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Jose Herrera",
        "handle": "josemiguelherrera",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/20531507?v=4",
        "kind": "user",
        "linkedUserId": "kn7aqj9rnjrsgd6awr5hm4rq9h828zzd"
    },
    "ownerHandle": "josemiguelherrera",
    "skill": {
        "_creationTime": 1772654471496,
        "_id": "kd796ym3am6qz6mrt01s8y9qw1829xzw",
        "badges": [],
        "createdAt": 1772654471496,
        "displayName": "Questrade",
        "latestVersionId": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
        "ownerUserId": "kn7aqj9rnjrsgd6awr5hm4rq9h828zzd",
        "slug": "questrade",
        "stats": {
            "comments": 0,
            "downloads": 180,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Access Questrade brokerage accounts and Canadian\/US market data for balances, positions, orders, executions, Level 1 quotes, historical candles, and symbol s...",
        "tags": {
            "brokerage": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "canada": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "latest": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "market-data": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "portfolio": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "questrade": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "rrsp": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "stocks": "k97f5dh79v1vrqgcbv5tyt8h0n829eff",
            "tfsa": "k97f5dh79v1vrqgcbv5tyt8h0n829eff"
        },
        "updatedAt": 1772654482396
    }
}