41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match a wallet-for-agents use case, but the package metadata omits the required API credential and the source is unknown — this mismatch and reliance on a third‑party custody ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770258793733,
        "_id": "k9703c993e5dm864gt5ke6eyh980jj4b",
        "changelog": "Vincent 1.0.0 – Initial Release\n\n- Provides secure wallets for agents supporting transfers, swaps, EVM chain transactions, raw signing, and Polymarket betting.\n- Ensures the agent never accesses the private key; all transactions are server-side, controlled by owner-set policies.\n- Offers multiple wallet types: EVM_WALLET, RAW_SIGNER, and POLYMARKET_WALLET, each optimized for specific use cases.\n- Allows owners to configure policies for address, token, function allowlists, and spending limits.\n- Includes REST API endpoints for creating wallets, checking balances, transferring tokens, swapping, executing arbitrary transactions, and API key recovery.\n- Comprehensive documentation for setup, usage, and recovery is provided.",
        "changelogSource": "user",
        "createdAt": 1770258793733,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Chris Cassano",
        "handle": "glitch003",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1285652?v=4",
        "kind": "user",
        "linkedUserId": "kn7da12r1b6qj77ppe2mvy0brd8087cx"
    },
    "ownerHandle": "glitch003",
    "skill": {
        "_creationTime": 1770258793733,
        "_id": "kd7ddsf319a4rr036rnshbv4mx80k870",
        "badges": [],
        "canonicalSkillId": "kd73z4vwcm8qyc5byxfdhtv6gs808qvd",
        "createdAt": 1770258793733,
        "displayName": "Vincent - Agent Wallet",
        "forkOf": {
            "at": 1770258793733,
            "kind": "duplicate",
            "skillId": "kd73z4vwcm8qyc5byxfdhtv6gs808qvd"
        },
        "latestVersionId": "k9703c993e5dm864gt5ke6eyh980jj4b",
        "ownerUserId": "kn7da12r1b6qj77ppe2mvy0brd8087cx",
        "slug": "vincent",
        "stats": {
            "comments": 0,
            "downloads": 1156,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Use this skill to safely create a wallet the agent can use for transfers, swaps, and any EVM chain transaction.  Also supports raw signing and polymarket betting.",
        "tags": {
            "latest": "k9703c993e5dm864gt5ke6eyh980jj4b"
        },
        "updatedAt": 1774322660717
    }
}