55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement the described Solana coin-flip game, but there are multiple coherence and operational issues (a third‑party installer URL, mismatched file paths, and risky instructions ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774087674418,
        "_id": "k97756tb3s3s9bsybpemjh24vx83anaa",
        "changelog": "- Initial release of THE FLIP skill on Solana devnet.\n- $1 USDC entry: Pick 20 coin flip predictions; match the first 14 to win the jackpot.\n- Command-line and API support to check game status, enter, claim, and monitor tickets.\n- Permissionless flip mechanism with a 12-hour on-chain enforced cooldown.\n- Jackpot pools all entry fees (99%) and resets upon a win; vault is a PDA (no private key).\n- Full documentation for wallet setup, API endpoints, and skill usage provided.",
        "changelogSource": "auto",
        "createdAt": 1774087674418,
        "parsed": {
            "clawdis": {
                "emoji": "🎰",
                "homepage": "https:\/\/github.com\/maurodelazeri\/the-flip-publish",
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "bedesta5050",
        "handle": "bedesta5050",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/138519398?v=4",
        "kind": "user",
        "linkedUserId": "kn72p39n5ztrtx04qeyve6qwh583bn2t"
    },
    "ownerHandle": "bedesta5050",
    "skill": {
        "_creationTime": 1774087674418,
        "_id": "kd74ghjyxqchy9y24329kxrv5x83bsj7",
        "badges": [],
        "createdAt": 1774087674418,
        "displayName": "The Flip",
        "latestVersionId": "k97756tb3s3s9bsybpemjh24vx83anaa",
        "ownerUserId": "kn72p39n5ztrtx04qeyve6qwh583bn2t",
        "slug": "the-flip-publish-2",
        "stats": {
            "comments": 0,
            "downloads": 30,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "$1 USDC entry. Pick 20 predictions. All 20 coins flip at once each round. Match the first 14 to win the entire jackpot. Live on Solana devnet.",
        "tags": {
            "latest": "k97756tb3s3s9bsybpemjh24vx83anaa"
        },
        "updatedAt": 1774088212804
    }
}