41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The SKILL.md clearly expects Trading 212 API keys and related environment variables, but the skill manifest declares no required credentials or env vars and has no provenance — this mismatch is concer...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770131242174,
        "_id": "k97c4b33r41tj7df1whmkyhcwh80ekn5",
        "changelog": "Initial release of the Trading 212 API skill.\n\n- Supports connecting to Trading 212 accounts (DEMO or LIVE) for Invest and Stocks ISA accounts.\n- Guides users through API authentication, credential setup, and environment selection.\n- Enables order placement (market, limit, pending), position monitoring, and account information retrieval.\n- Allows instrument search, portfolio overview, transaction history, and generating CSV reports.\n- Observes strict environment and account matching for credentials and requests.",
        "changelogSource": "auto",
        "createdAt": 1770131242174,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Engineering Manager @ Trading 212",
        "handle": "tsvetelin-kulinski",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/131450933?v=4",
        "kind": "user",
        "linkedUserId": "kn75dcqzjsmsvbqatwc3t8r2xh80fehq"
    },
    "ownerHandle": "tsvetelin-kulinski",
    "skill": {
        "_creationTime": 1770131242174,
        "_id": "kd74kv8nhpwcqa1jt9wzczzsy580e7zx",
        "badges": [],
        "createdAt": 1770131242174,
        "displayName": "Trading212 API",
        "latestVersionId": "k97c4b33r41tj7df1whmkyhcwh80ekn5",
        "ownerUserId": "kn75dcqzjsmsvbqatwc3t8r2xh80fehq",
        "slug": "trading212-api",
        "stats": {
            "comments": 0,
            "downloads": 1586,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 2,
            "versions": 1
        },
        "summary": "This skill should be used when the user asks to \"connect to Trading 212\", \"authenticate Trading 212 API\", \"place a trade\", \"buy stock\", \"sell shares\", \"place market order\",, \"place pending order\", \"place limit order\", \"cancel order\", \"check my balance\", \"view account summary\", \"get positions\", \"view portfolio\", \"check P&L\", \"find ticker symbol\", \"search instruments\", \"check trading hours\", \"view dividends\", \"get order history\", \"export transactions\", \"generate CSV report\", or needs guidance on Trading 212 API authentication, order placement, position monitoring, account information, instrument lookup, or historical data retrieval.",
        "tags": {
            "1.0.0": "k97c4b33r41tj7df1whmkyhcwh80ekn5",
            "latest": "k97c4b33r41tj7df1whmkyhcwh80ekn5"
        },
        "updatedAt": 1774322418389
    }
}