47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's purpose (letting an agent spend money via CreditClaw) is plausible and the single requested secret (CREDITCLAW_API_KEY) is appropriate, but the runtime instructions ask the agent to write ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773190720113,
        "_id": "k971s2w8g9p0x255k08g5m0mqd82p1aq",
        "changelog": "Initial release of CreditClaw Shopping skill.\n\n- Enables AI agents and bots to securely spend via encrypted cards and stablecoin wallets with strict owner-approved controls.\n- Supports multiple payment rails: Encrypted Card (live), Stripe Wallet (private beta), and Crossmint Wallet (coming soon).\n- Offers detailed documentation for setup, status checks, spending permissions, transaction management, storefront creation, and payment link generation.\n- Emphasizes strong security: API keys never sent outside creditclaw.com, strict guardrails, per-transaction approval, server-side enforcement, and audit logging.\n- Human owners maintain full oversight and control, including real-time dashboards, alerts, and wallet freezing capabilities.",
        "changelogSource": "user",
        "createdAt": 1773190720113,
        "parsed": {
            "clawdis": {
                "primaryEnv": "CREDITCLAW_API_KEY",
                "requires": {
                    "env": [
                        "CREDITCLAW_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jononovo",
        "handle": "jononovo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/22595409?v=4",
        "kind": "user",
        "linkedUserId": "kn70b4sg802tznj0f1r5msxg9980ddmn"
    },
    "ownerHandle": "jononovo",
    "skill": {
        "_creationTime": 1773190720113,
        "_id": "kd76jy4g1r26hp1pn170p8yg3d82pv7f",
        "badges": [],
        "createdAt": 1773190720113,
        "displayName": "VenmoClaw - Give your Claw Agent a credit card - They can spend anywhere or request payment",
        "latestVersionId": "k971s2w8g9p0x255k08g5m0mqd82p1aq",
        "ownerUserId": "kn70b4sg802tznj0f1r5msxg9980ddmn",
        "slug": "venmo",
        "stats": {
            "comments": 0,
            "downloads": 139,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Is your claw a shopaholic? Provide payment wallets and strict controls.",
        "tags": {
            "latest": "k971s2w8g9p0x255k08g5m0mqd82p1aq"
        },
        "updatedAt": 1774331612890
    }
}