65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to implement a trading/vault platform as described, but there are multiple internal inconsistencies and sensitive operations (undocumented required credentials, contradictory instruc...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774190756996,
        "_id": "k972xg5m74zbpaam8f4dr39ye583crkr",
        "changelog": "## v0.0.2 (2026-03-22)\n\n  ### Fixed\n  - **Instruction conflict resolved**: Removed contradictory `\/auth\/me` validation guidance- Agent uses API key (`x-api-key`\n  header), cannot call `\/auth\/me` (requires JWT token)\n    - Correct flow: attempt `POST \/user-secrets`, handle `403 RD_MODE_REQUIRED` response\n    - Updated R&D Mode check instructions (line 487-503, 999)\n  - **Security scan improvements**: Addressed ClawHub \"Instruction Scope\" warning\n\n  ### Documentation\n  - Clarified that `\/auth\/me` is frontend-only (JWT-based), not for Agent validation\n  - Updated security best practices to match actual API behavior",
        "changelogSource": "user",
        "createdAt": 1774190756996,
        "version": "0.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Caesar Lynch",
        "handle": "thecleopatra",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/99267016?v=4",
        "kind": "user",
        "linkedUserId": "kn73jgbgkkyqpjggq0nhjbpsw58319vw"
    },
    "ownerHandle": "thecleopatra",
    "skill": {
        "_creationTime": 1774189279289,
        "_id": "kd76kw9sck7a70kf63vfyq727583cs52",
        "badges": [],
        "createdAt": 1774189279289,
        "displayName": "TradingFlow — AI-Powered Intent Trading Across Crypto, Stocks & More",
        "latestVersionId": "k972xg5m74zbpaam8f4dr39ye583crkr",
        "ownerUserId": "kn73jgbgkkyqpjggq0nhjbpsw58319vw",
        "slug": "tradingflow",
        "stats": {
            "comments": 0,
            "downloads": 28,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "Create and manage crypto trading strategies, deploy automated trading bots, and control on-chain vaults on BSC, Aptos, and Solana. Use when the user wants to...",
        "tags": {
            "latest": "k972xg5m74zbpaam8f4dr39ye583crkr"
        },
        "updatedAt": 1774195913406
    }
}