55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill claims to be an instruction-only, read‑only TRON wallet query tool, but the package contains install scripts, an MCP server, and cryptography/web3 libraries inconsistent with that claim — re...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773799576158,
        "_id": "k977zck84qdvc7yfazrfm64wjx834cs7",
        "changelog": "tronlink skills v1.0.1\n\n- Added comprehensive documentation in SKILL.md covering command usage, common token contracts, troubleshooting, and skill routing.\n- Clarified intended use cases and command-line instructions for wallet balance, TRC-20 holdings, transaction history, account info, and address validation.\n- Provided guidance on prerequisites, address formats, and interactions with other related skills (swap, staking, market, resource).\n- Included troubleshooting tips and details for handling common user issues (unactivated accounts, bandwidth, and energy requirements).",
        "changelogSource": "user",
        "createdAt": 1773799576158,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "trondev",
        "handle": "bbsyaya",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/24472201?v=4",
        "kind": "user",
        "linkedUserId": "kn74w6vw3rehckm42bj441szf5834v5d"
    },
    "ownerHandle": "bbsyaya",
    "skill": {
        "_creationTime": 1773799576158,
        "_id": "kd74ghpkrc9b03pe1h3pm30bg58350pv",
        "badges": [],
        "createdAt": 1773799576158,
        "displayName": "tronlink-skills",
        "latestVersionId": "k977zck84qdvc7yfazrfm64wjx834cs7",
        "ownerUserId": "kn74w6vw3rehckm42bj441szf5834v5d",
        "slug": "tronlink-skills",
        "stats": {
            "comments": 0,
            "downloads": 45,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "This skill should be used when the user asks to 'check my TRX balance', 'show my TRON holdings', 'what tokens do I have on TRON', 'check my TRON wallet', 'Tr...",
        "tags": {
            "latest": "k977zck84qdvc7yfazrfm64wjx834cs7"
        },
        "updatedAt": 1774336672025
    }
}