59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The code implements the advertised Safe multisig functionality, but the skill metadata and SKILL.md under-report required credentials and environment inputs (notably a signer private key and RPC/API e...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770615689367,
        "_id": "k97ev2xhqp0emwyjzzvtz0fews80vn4v",
        "changelog": "safe-multisig-skill 2.1.0\n\n- Adds comprehensive TypeScript-strict scripts for Safe multisig management using Safe{Core} SDK (protocol-kit v6 \/ api-kit v4).\n- Enables proposing, confirming, and executing multisig transactions across multiple chains (Base, Ethereum, Optimism, Arbitrum, Polygon, etc.).\n- Includes scripts for Safe creation\/prediction, state fetching, listing transactions, building\/proposing\/approving\/executing transactions, and troubleshooting nonce\/signature issues.\n- Enhances security and usability with extensive input validation, clear configuration options, and detailed usage instructions.\n- All major commands and flows are now documented with examples and references.",
        "changelogSource": "auto",
        "createdAt": 1770615689367,
        "version": "2.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "openclaw-consensus-bot",
        "handle": "openclaw-consensus-bot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258721376?v=4",
        "kind": "user",
        "linkedUserId": "kn76svgy6yt3a5xqex82hp61qs80qwjy"
    },
    "ownerHandle": "openclaw-consensus-bot",
    "skill": {
        "_creationTime": 1770615689367,
        "_id": "kd7cebcxms41x6xhn06r7nrdzd80thpe",
        "badges": [],
        "createdAt": 1770615689367,
        "displayName": "Safe Multisig Skill",
        "latestVersionId": "k97ev2xhqp0emwyjzzvtz0fews80vn4v",
        "ownerUserId": "kn76svgy6yt3a5xqex82hp61qs80qwjy",
        "slug": "safe-multisig-skill",
        "stats": {
            "comments": 0,
            "downloads": 780,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 1
        },
        "summary": "Propose, confirm, and execute Safe multisig transactions using the Safe{Core} SDK (protocol-kit v6 \/ api-kit v4). TypeScript strict. Use when an agent needs to operate a Safe smart account — (1) create\/predict a new Safe, (2) fetch Safe owners\/threshold\/nonce, (3) list pending multisig txs, (4) build + propose a tx, (5) add confirmations, (6) execute a tx onchain, or (7) troubleshoot Safe nonce\/signature issues across chains (Base\/Ethereum\/Optimism\/Arbitrum\/Polygon\/etc.).",
        "tags": {
            "latest": "k97ev2xhqp0emwyjzzvtz0fews80vn4v"
        },
        "updatedAt": 1772336468226
    }
}