59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's behavior matches its stated purpose (querying The Graph Token MCP) but the documentation and runtime instructions require a JWT secret (THEGRAPH_TOKEN_API_JWT) that is not declared in the ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772960558939,
        "_id": "k97exf3jwhqyhh54zacb07cmmh82hdqv",
        "changelog": "**Auth handling and documentation improvements for The Graph Token MCP Skill**\n\n- Clarified the required use of a specific Token API JWT (not a subgraph API key) for authentication.\n- Updated setup instructions to reflect proper credential separation and explicit JWT bearer token workflow.\n- Added warnings against reusing credentials from other The Graph skills.\n- Expanded guardrails and troubleshooting steps for correct auth binding and token usage.\n- Improved language in capability and prerequisite descriptions for accuracy.",
        "changelogSource": "auto",
        "createdAt": 1772960558939,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jolestar",
        "handle": "jolestar",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/77268?v=4",
        "kind": "user",
        "linkedUserId": "kn76v1w3vse2yfx3k4dkkbn9bd81xemv"
    },
    "ownerHandle": "jolestar",
    "skill": {
        "_creationTime": 1772899646010,
        "_id": "kd78az2hexax5f7bfrvqwzm28n82evsq",
        "badges": [],
        "createdAt": 1772899646010,
        "displayName": "Thegraph Token Mcp Skill",
        "latestVersionId": "k97exf3jwhqyhh54zacb07cmmh82hdqv",
        "ownerUserId": "kn76v1w3vse2yfx3k4dkkbn9bd81xemv",
        "slug": "thegraph-token-mcp-skill",
        "stats": {
            "comments": 0,
            "downloads": 210,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 2
        },
        "summary": "Use The Graph Token API MCP through UXC for token metadata, wallet balances, transfers, holders, pools, and market data with help-first inspection and Token...",
        "tags": {
            "latest": "k97exf3jwhqyhh54zacb07cmmh82hdqv"
        },
        "updatedAt": 1774330373200
    }
}