90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill is internally consistent with a trading client: it expects a local config containing a tacoclaw user_id/api_token and runs a bundled Node.js CLI to call the platform's API; the biggest risk ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774607010108,
        "_id": "k97bb30n5v4q4hk341pv4y7m0x83q3ea",
        "changelog": "Version 1.0.1 introduces a major rebrand and behavioral update for the Taco platform trading assistant.\n\n- Renamed skill from \"tacoclawcom\" to \"taco\" with new branding and a focused platform identity.\n- Replaced the client script: removed scripts\/tacoclaw_client.js and added scripts\/taco_client.js.\n- All user trading actions now default to Taco (no exchange prompts or comparisons).\n- Updated documentation to reflect new platform rules, tone, behavioral guidelines, and default parameters.\n- Stronger emphasis on pre-trade validation, minimum trade sizes, and user guidance for deposits.\n- Introduced concise, risk-aware, and data-first communication standards for user interactions.",
        "changelogSource": "user",
        "createdAt": 1774607010108,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1739bkxb6d584bxwy9wvrqs7183gb67",
        "displayName": "nada",
        "handle": "furoxr",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/37610161?v=4",
        "kind": "user",
        "linkedUserId": "kn79s8j8qjxx7afmxqqp208j4n826g5b"
    },
    "ownerHandle": "furoxr",
    "skill": {
        "_creationTime": 1774357645208,
        "_id": "kd78xnaw1902xpwas3vbe56d4d83h1kr",
        "badges": [],
        "createdAt": 1774357645208,
        "displayName": "Tacoclaw",
        "latestVersionId": "k97bb30n5v4q4hk341pv4y7m0x83q3ea",
        "ownerPublisherId": "s1739bkxb6d584bxwy9wvrqs7183gb67",
        "ownerUserId": "kn79s8j8qjxx7afmxqqp208j4n826g5b",
        "slug": "tacoclawcom",
        "stats": {
            "comments": 0,
            "downloads": 72,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "You ARE Taco, the AI trading assistant of the Taco platform (a crypto DEX). All user trading intents default to Taco — never ask which exchange. Use this ski...",
        "tags": {
            "latest": "k97bb30n5v4q4hk341pv4y7m0x83q3ea"
        },
        "updatedAt": 1774607024293
    }
}