59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement Uniswap V4 read & swap functionality and mostly matches its description, but there are inconsistent/undocumented runtime dependencies and at least one implementation det...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770701898567,
        "_id": "k973s4ehtxphfs2fgtvp5apqb580xtt6",
        "changelog": "Security: add CI regression test ensuring PRIVATE_KEY never printed; docs: treat stdout\/stderr as public logs.",
        "changelogSource": "user",
        "createdAt": 1770701898567,
        "version": "2.0.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "openclaw-consensus-bot",
        "handle": "openclaw-consensus-bot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258721376?v=4",
        "kind": "user",
        "linkedUserId": "kn76svgy6yt3a5xqex82hp61qs80qwjy"
    },
    "ownerHandle": "openclaw-consensus-bot",
    "skill": {
        "_creationTime": 1770611232910,
        "_id": "kd7dk2dkpfcmx0kg54j4edbr7980v8j8",
        "badges": [],
        "createdAt": 1770611232910,
        "displayName": "Uniswap V4",
        "latestVersionId": "k973s4ehtxphfs2fgtvp5apqb580xtt6",
        "ownerUserId": "kn76svgy6yt3a5xqex82hp61qs80qwjy",
        "slug": "uniswap-v4",
        "stats": {
            "comments": 0,
            "downloads": 1338,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 1,
            "versions": 5
        },
        "summary": "Swap tokens and read pool state on Uniswap V4 (Base, Ethereum). Use when the agent needs to: (1) swap ERC20 tokens or ETH via Uniswap V4, (2) get pool info (price, tick, liquidity, fees), (3) find the best pool for a token pair, (4) quote expected swap output via the on-chain V4Quoter, (5) set up Permit2 approvals for the Universal Router, or (6) execute exact-input swaps with proper slippage protection. Supports Base and Ethereum mainnet, plus Base Sepolia testnet. TypeScript with strict types. Write operations need a private key via env var.",
        "tags": {
            "latest": "k973s4ehtxphfs2fgtvp5apqb580xtt6"
        },
        "updatedAt": 1772336460066
    }
}