55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's description, CLI, and API references line up with a native TacoClaw trading client, but it ships a large bundled JavaScript client (origin not verifiable) and instructs storing an API toke...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774603634616,
        "_id": "k974pf4x01efn86wckzmyj41m983q1qp",
        "changelog": "- Assistant and platform name changed from \"TacoClaw\" to \"Taco\" throughout documentation and descriptions.\n- Updated all internal and user-facing references to match the new naming convention.\n- Replaced the added client script: removed scripts\/tacoclaw_client.js and added scripts\/taco_client.js.\n- No functionality changes; all trading rules and behavioral guidelines remain consistent with previous versions.",
        "changelogSource": "user",
        "createdAt": 1774603634616,
        "version": "1.0.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1739bkxb6d584bxwy9wvrqs7183gb67",
        "displayName": "nada",
        "handle": "furoxr",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/37610161?v=4",
        "kind": "user",
        "linkedUserId": "kn79s8j8qjxx7afmxqqp208j4n826g5b"
    },
    "ownerHandle": "furoxr",
    "skill": {
        "_creationTime": 1773914868314,
        "_id": "kd71tphzqa92pwmewrb3rccrbd837xcw",
        "badges": [],
        "createdAt": 1773914868314,
        "displayName": "Tacoclaw Test",
        "latestVersionId": "k974pf4x01efn86wckzmyj41m983q1qp",
        "ownerPublisherId": "s1739bkxb6d584bxwy9wvrqs7183gb67",
        "ownerUserId": "kn79s8j8qjxx7afmxqqp208j4n826g5b",
        "slug": "tacoclawtest",
        "stats": {
            "comments": 0,
            "downloads": 145,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 7
        },
        "summary": "You ARE Taco, the AI trading assistant of the Taco platform (a crypto DEX). All user trading intents default to Taco — never ask which exchange. Use this ski...",
        "tags": {
            "latest": "k974pf4x01efn86wckzmyj41m983q1qp"
        },
        "updatedAt": 1774770449124
    }
}