41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (swap tokens on Base) matches its instructions, but it relies on running an unpinned npm CLI via npx (remote code execution risk) and does not declare how wallet credentials are ac...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770843443390,
        "_id": "k970s5pthwsfhjss7z4cc90ak180y4rh",
        "changelog": "Initial release of the trade skill for swapping tokens on the Base network.\n\n- Enables trading, swapping, buying, selling, and converting tokens (e.g., USDC, ETH, WETH) via simple commands.\n- Supports amount input in USD, decimal, whole number, and atomic unit formats.\n- Includes token alias resolution and auto-detection of decimals for known tokens and contract addresses.\n- Allows custom slippage settings and JSON output.\n- Provides detailed examples, prerequisites, and error handling guidelines.",
        "changelogSource": "auto",
        "createdAt": 1770843443390,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "0xRAG",
        "handle": "0xrag",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/15928227?v=4",
        "kind": "user",
        "linkedUserId": "kn7172tqys5cc867n3zq3xjyhs80y9m4"
    },
    "ownerHandle": "0xrag",
    "skill": {
        "_creationTime": 1770843443390,
        "_id": "kd79b770b8fwhpgr9nafyhf54180yxkc",
        "badges": [],
        "createdAt": 1770843443390,
        "displayName": "Trade",
        "latestVersionId": "k970s5pthwsfhjss7z4cc90ak180y4rh",
        "ownerUserId": "kn7172tqys5cc867n3zq3xjyhs80y9m4",
        "slug": "trade",
        "stats": {
            "comments": 0,
            "downloads": 797,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 0,
            "versions": 1
        },
        "summary": "Swap or trade tokens on Base network. Use when you or the user want to trade, swap, exchange, buy, sell, or convert between tokens like USDC, ETH, and WETH. Covers phrases like \"buy ETH\", \"sell ETH for USDC\", \"convert USDC to ETH\", \"get some ETH\".",
        "tags": {
            "latest": "k970s5pthwsfhjss7z4cc90ak180y4rh"
        },
        "updatedAt": 1774324193938
    }
}