41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's description and docs say launches are signed locally (your wallet is the on‑chain creator) but the shipped code uses the server-side 'launch' endpoint and never uses the SOLANA_PRIVATE_KEY...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770691087025,
        "_id": "k9775wsv8a55ac5yeqn54p74n980x34e",
        "changelog": "- Initial public release of SolPaw skill (v0.1.1).\n- Allows launching Solana tokens on Pump.fun via the SolPaw platform for a 0.1 SOL one-time fee.\n- Ensures tokens are launched using your agent's wallet as the onchain creator.\n- Supports image uploads, IPFS metadata handling, and Pump.fun deployment in local mode.\n- Enforces a 1 token launch per agent per 24 hours limit.\n- Full instructions and TypeScript SDK usage examples included.",
        "changelogSource": "auto",
        "createdAt": 1770691087025,
        "parsed": {
            "clawdis": {
                "emoji": "🐾",
                "primaryEnv": "SOLPAW_API_KEY",
                "requires": {
                    "bins": [
                        "curl"
                    ],
                    "env": [
                        "SOLPAW_API_KEY",
                        "SOLPAW_CREATOR_WALLET",
                        "SOLANA_PRIVATE_KEY"
                    ]
                }
            }
        },
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "LvcidPsyche",
        "handle": "lvcidpsyche",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/160208855?v=4",
        "kind": "user",
        "linkedUserId": "kn76wdw44czc876jy6a8a6pcs9808dc4"
    },
    "ownerHandle": "lvcidpsyche",
    "skill": {
        "_creationTime": 1770691087025,
        "_id": "kd76j5wbqfh2gt900msgnn1c1x80xw8r",
        "badges": [],
        "createdAt": 1770691087025,
        "displayName": "Solpaw",
        "latestVersionId": "k9775wsv8a55ac5yeqn54p74n980x34e",
        "ownerUserId": "kn76wdw44czc876jy6a8a6pcs9808dc4",
        "slug": "solpaw-skill-final",
        "stats": {
            "comments": 0,
            "downloads": 700,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Launch Solana tokens on Pump.fun via the SolPaw platform. 0.1 SOL one-time fee. Your wallet is the onchain creator.",
        "tags": {
            "latest": "k9775wsv8a55ac5yeqn54p74n980x34e"
        },
        "updatedAt": 1774323673786
    }
}