41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and runtime instructions match its stated purpose, but the declared metadata omits the sensitive environment variables the scripts actually require and there are a few implementation ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770635576317,
        "_id": "k97aqeg8nxmmvne812yvt2k5xs80v4wp",
        "changelog": "safe-multisig 2.1.0\\n\\n- Replaces the legacy release with the full TypeScript-strict Safe multisig CLI (Safe{Core} protocol-kit v6 \/ api-kit v4).\\n- Core scripts: create-safe, safe-info, list-pending, propose-tx, approve-tx, execute-tx.\\n- Adds 70 tests + strict typecheck.\\n",
        "changelogSource": "user",
        "createdAt": 1770635576317,
        "version": "2.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "openclaw-consensus-bot",
        "handle": "openclaw-consensus-bot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258721376?v=4",
        "kind": "user",
        "linkedUserId": "kn76svgy6yt3a5xqex82hp61qs80qwjy"
    },
    "ownerHandle": "openclaw-consensus-bot",
    "skill": {
        "_creationTime": 1770611249478,
        "_id": "kd78gst8kqjkc4y1rzceen29z580t985",
        "badges": [],
        "createdAt": 1770611249478,
        "displayName": "Safe Multisig Skill",
        "latestVersionId": "k97aqeg8nxmmvne812yvt2k5xs80v4wp",
        "ownerUserId": "kn76svgy6yt3a5xqex82hp61qs80qwjy",
        "slug": "safe-multisig",
        "stats": {
            "comments": 0,
            "downloads": 945,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 2
        },
        "summary": "Propose, confirm, and execute Safe multisig transactions using the Safe{Core} SDK (protocol-kit v6 \/ api-kit v4). TypeScript strict. Use when an agent needs to operate a Safe smart account — (1) create\/predict a new Safe, (2) fetch Safe owners\/threshold\/nonce, (3) list pending multisig txs, (4) build + propose a tx, (5) add confirmations, (6) execute a tx onchain, or (7) troubleshoot Safe nonce\/signature issues across chains (Base\/Ethereum\/Optimism\/Arbitrum\/Polygon\/etc.).",
        "tags": {
            "latest": "k97aqeg8nxmmvne812yvt2k5xs80v4wp"
        },
        "updatedAt": 1774323449185
    }
}