41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (cross-chain trading) matches the scripts provided, but the package manifest declares no required credentials while the runtime scripts create/read a .env containing a private key ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772202700984,
        "_id": "k97e6z1qp4psrz30tjznrsapq581z9ns",
        "changelog": "Initial publish under new slug universal-trading.",
        "changelogSource": "user",
        "createdAt": 1772202700984,
        "parsed": {
            "clawdis": {
                "install": [
                    {
                        "bins": [
                            "node",
                            "npm"
                        ],
                        "formula": "node",
                        "id": "brew-node",
                        "kind": "brew",
                        "label": "Install Node.js and npm (Homebrew)"
                    }
                ],
                "os": [
                    "darwin",
                    "linux"
                ],
                "requires": {
                    "bins": [
                        "node",
                        "npm"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "0xMomo-NGClubs",
        "handle": "0xmomo-ngclubs",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/191135655?v=4",
        "kind": "user",
        "linkedUserId": "kn76f109awjtypmk3wf3151mt581yv0d"
    },
    "ownerHandle": "0xmomo-ngclubs",
    "skill": {
        "_creationTime": 1772202700984,
        "_id": "kd794g4pg6bw8pshzt0rv178vd81yyy5",
        "badges": [],
        "canonicalSkillId": "kd70vfxjr9nw2eeegk8zzz6y7s81yds0",
        "createdAt": 1772202700984,
        "displayName": "Universal Trading",
        "forkOf": {
            "at": 1772202700984,
            "kind": "duplicate",
            "skillId": "kd70vfxjr9nw2eeegk8zzz6y7s81yds0"
        },
        "latestVersionId": "k97e6z1qp4psrz30tjznrsapq581z9ns",
        "ownerUserId": "kn76f109awjtypmk3wf3151mt581yv0d",
        "slug": "universal-trading",
        "stats": {
            "comments": 0,
            "downloads": 250,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Execute cross-chain token trading on EVM and Solana with Particle Network Universal Account SDK. Use when users ask to set up universal-account-example, buy...",
        "tags": {
            "latest": "k97e6z1qp4psrz30tjznrsapq581z9ns"
        },
        "updatedAt": 1774327573675
    }
}