65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it claims (publish videos and manage wallet actions) but its runtime instructions reference undisclosed env vars and file paths for storing API keys, and the package metad...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773052001274,
        "_id": "k9737nv2b2sdegfk7rtra8kz9d82khgt",
        "changelog": "Initial release of x2c-publish — a skill for publishing videos to X2C and managing wallet assets.\n\n- Publish video content to the X2C platform using a structured, multi-step workflow\n- Manage distribution: upload videos, check review status, add episodes, and list projects\n- Full wallet management: view balances, claim X2C, swap to USDC, withdraw funds, and view transaction history\n- Strict publishing rules and error handling to ensure reliable integration\n- Multi-user support via user-bound API keys in OpenClaw environment or credentials",
        "changelogSource": "auto",
        "createdAt": 1773052001274,
        "parsed": {
            "clawdis": {
                "emoji": "📤",
                "primaryEnv": "X2C_API_KEY",
                "requires": {
                    "env": [
                        "X2C_API_KEY"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Parker",
        "handle": "patches429",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/169116739?v=4",
        "kind": "user",
        "linkedUserId": "kn7cjyykjsewjgw0xe9b08kcw982b4vx"
    },
    "ownerHandle": "patches429",
    "skill": {
        "_creationTime": 1773052001274,
        "_id": "kd721nr35f7jpqpkvbq7mfcfzh82kf02",
        "badges": [],
        "createdAt": 1773052001274,
        "displayName": "X2c Publish",
        "latestVersionId": "k9737nv2b2sdegfk7rtra8kz9d82khgt",
        "ownerUserId": "kn7cjyykjsewjgw0xe9b08kcw982b4vx",
        "slug": "x2c-publish",
        "stats": {
            "comments": 0,
            "downloads": 152,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "X2C Distribution and Wallet API — publish video to X2C platform, manage assets (balance, claim X2C, swap to USDC, withdraw, transactions).",
        "tags": {
            "latest": "k9737nv2b2sdegfk7rtra8kz9d82khgt"
        },
        "updatedAt": 1774330870484
    }
}