55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's stated purpose (a TacoClaw trading client) matches the included files and commands, but there are important mismatches and risk signals — notably undeclared credential handling and a large...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774444774467,
        "_id": "k97f9dq5qdy95c6a93abbkj10s83jaa0",
        "changelog": "This version introduces important user safety requirements:\n\n- Added a \"Safety & Confirmation Checks\" section.\n- Explicit user confirmation is now required before executing open\/close position, cancel orders, or set stop loss\/take profit commands.\n- You must not disable safety confirmations without repeated user re-confirmation.\n- No behavioral or functionality changes to commands—documentation update only.",
        "changelogSource": "user",
        "createdAt": 1774444774467,
        "version": "0.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175978t6y46e8wyh449v3nxdn83gxn8",
        "displayName": "Taco",
        "handle": "taco",
        "kind": "org"
    },
    "ownerHandle": "taco",
    "skill": {
        "_creationTime": 1774441621674,
        "_id": "kd766chwv37zcypqxxxzxztcc583jhfv",
        "badges": [],
        "createdAt": 1774441621674,
        "displayName": "Tacoclaw",
        "latestVersionId": "k97f9dq5qdy95c6a93abbkj10s83jaa0",
        "ownerPublisherId": "s175978t6y46e8wyh449v3nxdn83gxn8",
        "ownerUserId": "kn7bzv01rhms37d1g169s0jr61828yfa",
        "slug": "tacoclaw-dev",
        "stats": {
            "comments": 0,
            "downloads": 15,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Interact with the TacoClaw trading platform via API. Use when the user wants to execute natively with the tacoclaw gateway endpoints. Supports operations: (1...",
        "tags": {
            "latest": "k97f9dq5qdy95c6a93abbkj10s83jaa0"
        },
        "updatedAt": 1774449717410
    }
}