55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's written instructions expect and persist sensitive authentication (JWT/private-key) and instruct the agent to auto-initiate onboarding, but the registry metadata does not declare those cred...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773902661332,
        "_id": "k977eqqgdyb2j1h68pg429je5n836mbj",
        "changelog": "xtown-skills 0.1.0\n\n- Initial release of xtown-skills, enabling agent onboarding, wallet provisioning, and town registration for BNBTown on BNB Chain.\n- Immediate setup flow prompts owner to provision wallet if no agent is configured.\n- Integrates DeFi and autonomous agent interactions (swap, lend, stake, launch token, research) leveraging Unibase Pay (Privy) and identity.\n- Enforces strict security: all transactions require owner confirmation and validation against prompt injection.\n- Extensive onboarding, configuration, and operation guidelines provided via reference docs.",
        "changelogSource": "auto",
        "createdAt": 1773902661332,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "parasyte-x",
        "handle": "parasyte-x",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/16874777?v=4",
        "kind": "user",
        "linkedUserId": "kn76tpahrxccw4dg37s18rry2s80ffea"
    },
    "ownerHandle": "parasyte-x",
    "skill": {
        "_creationTime": 1773902661332,
        "_id": "kd7181zx1trch721m6pmsf50t9837bw2",
        "badges": [],
        "createdAt": 1773902661332,
        "displayName": "Xtown Skills",
        "latestVersionId": "k977eqqgdyb2j1h68pg429je5n836mbj",
        "ownerUserId": "kn76tpahrxccw4dg37s18rry2s80ffea",
        "slug": "xtown-skills",
        "stats": {
            "comments": 0,
            "downloads": 39,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Manage BNBTown identity, wallet, DeFi actions, token launch, and market research on BNB Chain using Unibase Pay and ERC-8004 autonomous Agent framework.",
        "tags": {
            "latest": "k977eqqgdyb2j1h68pg429je5n836mbj"
        },
        "updatedAt": 1774337778877
    }
}