41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated behavior (local signing so your wallet is the on‑chain creator) does not match the shipped code and configuration: it requests a private key but the TypeScript SDK calls the server-...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770689745965,
        "_id": "k979jmgdbhh3ymgemq8p2mcrq180w4xh",
        "changelog": "solpaw-skill v0.1.0\n\n- Initial release of SolPaw: launch Solana tokens on Pump.fun via the SolPaw platform\n- 0.1 SOL one-time platform fee per launch, with the agent's wallet as the onchain creator\n- Full support for metadata, image uploads, CSRF\/fee payments, and transaction signing\n- TypeScript SDK and command-line instructions included\n- Enforces 1 launch per 24h, with strong constraints for safe, responsible usage",
        "changelogSource": "auto",
        "createdAt": 1770689745965,
        "parsed": {
            "clawdis": {
                "emoji": "🐾",
                "primaryEnv": "SOLPAW_API_KEY",
                "requires": {
                    "bins": [
                        "curl"
                    ],
                    "env": [
                        "SOLPAW_API_KEY",
                        "SOLPAW_CREATOR_WALLET",
                        "SOLANA_PRIVATE_KEY"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "LvcidPsyche",
        "handle": "lvcidpsyche",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/160208855?v=4",
        "kind": "user",
        "linkedUserId": "kn76wdw44czc876jy6a8a6pcs9808dc4"
    },
    "ownerHandle": "lvcidpsyche",
    "skill": {
        "_creationTime": 1770689745965,
        "_id": "kd77xkkv4ze20wse34jjxj0y3s80wgpe",
        "badges": [],
        "createdAt": 1770689745965,
        "displayName": "Solpaw",
        "latestVersionId": "k979jmgdbhh3ymgemq8p2mcrq180w4xh",
        "ownerUserId": "kn76wdw44czc876jy6a8a6pcs9808dc4",
        "slug": "solpaw-skill",
        "stats": {
            "comments": 0,
            "downloads": 750,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 1
        },
        "summary": "Launch Solana tokens on Pump.fun via the SolPaw platform. 0.1 SOL one-time fee. Your wallet is the onchain creator.",
        "tags": {
            "latest": "k979jmgdbhh3ymgemq8p2mcrq180w4xh"
        },
        "updatedAt": 1774323671518
    }
}