41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions mostly match an identity/signing CLI, but there are metadata mismatches, a risky install instruction (curl | bash), and missing declarations around credentials and binaries — ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772487967414,
        "_id": "k973s7fx96jym14hd7gktg5tj1825bg2",
        "changelog": "v1.0.1 — Onboarding and identity linking flow updated; improved clarity and requirements\n\n- Onboarding flow clarified: new accounts are created via X or GitHub OAuth (no email registration).\n- DNS can now only be linked as an additional identity, not for primary account creation.\n- Under-the-hood, message verification now occurs against VouchHub over direct RPC, not subgraph.\n- Documentation updated to accurately describe the new onboarding and account creation process.\n- Minor improvements and clarifications throughout the skill documentation.",
        "changelogSource": "user",
        "createdAt": 1772487967414,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Jack Morgan",
        "handle": "jackpmorgan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/66273764?v=4",
        "kind": "user",
        "linkedUserId": "kn728574v8evhg91h5s2h75b6n81q8md"
    },
    "ownerHandle": "jackpmorgan",
    "skill": {
        "_creationTime": 1771868564995,
        "_id": "kd7eb1maj4vbk6ytzmvrkcgzeh81pg06",
        "badges": [],
        "createdAt": 1771868564995,
        "displayName": "Vouch",
        "latestVersionId": "k973s7fx96jym14hd7gktg5tj1825bg2",
        "ownerUserId": "kn728574v8evhg91h5s2h75b6n81q8md",
        "slug": "vouch-cli",
        "stats": {
            "comments": 0,
            "downloads": 361,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Signs, verifies, and manages cryptographic identity for AI agents using the Vouch CLI on Base. Use when an agent needs to: set up identity and register an ac...",
        "tags": {
            "latest": "k973s7fx96jym14hd7gktg5tj1825bg2"
        },
        "updatedAt": 1774326627226
    }
}