41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match a SushiSwap SDK, but the runtime examples access a PRIVATE_KEY environment variable without declaring it and the package provenance is unknown — this mismatch and missin...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770270698719,
        "_id": "k97fvm29t263ysgkks7gzp8prs80j73z",
        "changelog": "- Initial release of the SushiSwap TypeScript SDK.\n- Provides typed wrappers over the SushiSwap API for tokens, prices, quotes, and swap transaction generation.\n- Introduces ergonomic helpers for safer arithmetic, formatting, and comparisons.\n- Supports integration with TypeScript\/JavaScript applications using strongly typed primitives.\n- Requires a mandatory `referrer` parameter for all swap-related calls.\n- Exposes a list of supported swap networks and clarifies fee handling and customization policies.",
        "changelogSource": "auto",
        "createdAt": 1770270698719,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "0xMasayoshi",
        "handle": "0xmasayoshi",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/82962873?v=4",
        "kind": "user",
        "linkedUserId": "kn79jhwdfnvz9pznwmjm5tr3rn80jt4d"
    },
    "ownerHandle": "0xmasayoshi",
    "skill": {
        "_creationTime": 1770270698719,
        "_id": "kd71rg0488717jhmt07d63xgc580kn02",
        "badges": [],
        "createdAt": 1770270698719,
        "displayName": "SushiSwap SDK",
        "latestVersionId": "k97fvm29t263ysgkks7gzp8prs80j73z",
        "ownerUserId": "kn79jhwdfnvz9pznwmjm5tr3rn80jt4d",
        "slug": "sushiswap-sdk",
        "stats": {
            "comments": 0,
            "downloads": 1172,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 0,
            "versions": 1
        },
        "summary": "TypeScript SDK for interacting with the SushiSwap Aggregator and related primitives. This SDK is a typed wrapper over the SushiSwap API, providing ergonomic helpers for token amounts, prices, quotes, and swap transaction generation.\nUSE THIS SKILL WHEN: - Building TypeScript or JavaScript applications - You want strongly typed token, amount, and fraction primitives - You need to request swap quotes or executable swap transactions via code - You want safer arithmetic, formatting, and comparisons without floating point errors - You prefer SDK-based integration over raw HTTP requests",
        "tags": {
            "latest": "k97fvm29t263ysgkks7gzp8prs80j73z"
        },
        "updatedAt": 1774322692988
    }
}