59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement the advertised identity/payments/arbitration features, but its runtime instructions and included code expect sensitive secrets and local filesystem/network access that a...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770668807243,
        "_id": "k976ntxjex8dajbjw589hxwbrd80vcde",
        "changelog": "receipts-guard v0.7.1\n\n- 🔐 Added HTTP API authentication with API Key and DID signature support\n- 🛡️ Authorization checks: only counterparties can accept proposals via API\n- 🌐 CORS restricted: default block, configurable allowed origins\n- ⚡ Implemented rate limiting (100 requests\/min per IP)\n- ✅ Input validation for payment address, amount, and deadlines on proposals\n- Clear separation of protected vs public HTTP endpoints in server mode",
        "changelogSource": "auto",
        "createdAt": 1770668807243,
        "parsed": {
            "clawdis": {
                "emoji": "⚖️",
                "requires": {
                    "anyBins": [
                        "node"
                    ]
                }
            }
        },
        "version": "0.7.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "lazaruseth",
        "handle": "lazaruseth",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/129991329?v=4",
        "kind": "user",
        "linkedUserId": "kn75rp75pxqtzt9jdykgx2eq2980ms6c"
    },
    "ownerHandle": "lazaruseth",
    "skill": {
        "_creationTime": 1770401955217,
        "_id": "kd76zrdwyr425gj48qt6ycye6580mkx9",
        "badges": [],
        "createdAt": 1770401955217,
        "displayName": "Receipts Guard",
        "latestVersionId": "k976ntxjex8dajbjw589hxwbrd80vcde",
        "ownerUserId": "kn75rp75pxqtzt9jdykgx2eq2980ms6c",
        "slug": "receipts-guard",
        "stats": {
            "comments": 0,
            "downloads": 1865,
            "installsAllTime": 2,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 9
        },
        "summary": "ERC-8004 identity, x402 payments, and arbitration protocol for autonomous agent commerce. The three rails for the machine economy.",
        "tags": {
            "agreements": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "audit": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "compliance": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "disputes": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "evidence": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "export": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "latest": "k976ntxjex8dajbjw589hxwbrd80vcde",
            "liability": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "local": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "payments": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "privacy": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "query": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "receipts": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "security": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "tos": "k978t1njv3cxak6n4j1130qyax80sfqf",
            "transactions": "k978t1njv3cxak6n4j1130qyax80sfqf"
        },
        "updatedAt": 1772422301822
    }
}