41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill is coherent with its stated purpose (it runs an npm CLI to search a marketplace) but instructs the agent to run remote code via npx and to probe endpoints by trying multiple HTTP methods — b...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770843419150,
        "_id": "k970pm1w0xp4e0stenqeryrrn180zqza",
        "changelog": "Initial release of the \"search-for-service\" skill.\n\n- Enables searching and browsing the x402 bazaar marketplace for paid API services.\n- Supports keyword search, resource browsing, and inspection of endpoint payment requirements.\n- Uses `npx awal@latest x402 bazaar` commands—no authentication or balance required for searching.\n- Results are cached locally and auto-refresh every 12 hours.\n- Serves as a fallback skill when no specific skill matches a user’s request for external services or APIs.",
        "changelogSource": "auto",
        "createdAt": 1770843419150,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "0xRAG",
        "handle": "0xrag",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/15928227?v=4",
        "kind": "user",
        "linkedUserId": "kn7172tqys5cc867n3zq3xjyhs80y9m4"
    },
    "ownerHandle": "0xrag",
    "skill": {
        "_creationTime": 1770843419150,
        "_id": "kd7659pcbq6eqkyd4es1azx9dn80yjtc",
        "badges": [],
        "createdAt": 1770843419150,
        "displayName": "Search For Service",
        "latestVersionId": "k970pm1w0xp4e0stenqeryrrn180zqza",
        "ownerUserId": "kn7172tqys5cc867n3zq3xjyhs80y9m4",
        "slug": "search-for-service",
        "stats": {
            "comments": 0,
            "downloads": 765,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 0,
            "versions": 1
        },
        "summary": "Search and browse the x402 bazaar marketplace for paid API services. Use when you or the user want to find available services, see what's available, discover APIs, or need an external service to accomplish a task. Also use as a fallback when no other skill clearly matches — search the bazaar to see if a paid service exists. Covers \"what can I do?\", \"find me an API for...\", \"what services are available?\", \"search for...\", \"browse the bazaar\".",
        "tags": {
            "latest": "k970pm1w0xp4e0stenqeryrrn180zqza"
        },
        "updatedAt": 1774324192798
    }
}