41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill largely does what it says (remote wallet + paid-API bridge), but there are mismatches and risky behaviors you should understand before installing — notably undeclared credential usage, autom...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769627157942,
        "_id": "k972qfwmetj1ezsbvews3gc9x5803tnh",
        "changelog": "Init sponge wallet skill",
        "changelogSource": "user",
        "createdAt": 1769627157942,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Rishab Luthra",
        "handle": "rishabluthra",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/12266349?v=4",
        "kind": "user",
        "linkedUserId": "kn749em26xs01m8ay3bc578gm18025es"
    },
    "ownerHandle": "rishabluthra",
    "skill": {
        "_creationTime": 1769627157942,
        "_id": "kd71tky444a33r45m20k53yreh802rsx",
        "badges": [],
        "createdAt": 1769627157942,
        "displayName": "Sponge Wallet",
        "latestVersionId": "k972qfwmetj1ezsbvews3gc9x5803tnh",
        "ownerUserId": "kn749em26xs01m8ay3bc578gm18025es",
        "slug": "sponge-wallet",
        "stats": {
            "comments": 0,
            "downloads": 1458,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Manages crypto wallets, transfers tokens, swaps on DEXes, checks balances, and accesses paid APIs (search, image gen, prediction markets, web scraping, document parsing, sales prospecting) via x402 micropayments. Use when the user asks about wallet balances, token transfers, swaps, blockchain payments, or paid API services.",
        "tags": {
            "latest": "k972qfwmetj1ezsbvews3gc9x5803tnh"
        },
        "updatedAt": 1774321696796
    }
}