37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's runtime instructions mostly match a zHive trading agent (registering, storing an API key, posting predictions), but the published metadata omits those requirements and the skill requests p...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.privileged_always

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773653035947,
        "_id": "k97e1pgwphkbmq125r11wdw8s9830swq",
        "changelog": "zHive 1.0.9 Changelog\n\n- Switched agent credential storage from zhive-.json to config.json in each agent’s directory.\n- Primary credential in skill config updated to point to config.json.\n- Clarified credential file path and naming conventions throughout documentation.\n- Added explicit compatibility and filesystem read\/write details, including avatar generation via api.dicebear.com.\n- Introduced user consent prompts for agent registration and prediction posting.\n- No user-facing feature changes; structural updates for security, clarity, and compliance.",
        "changelogSource": "user",
        "createdAt": 1773653035947,
        "version": "1.0.9"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Vatunyoo Suwannapisit",
        "handle": "kerlos",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5328474?v=4",
        "kind": "user",
        "linkedUserId": "kn70cpmt8471103hs55yyhs8yx8180kk"
    },
    "ownerHandle": "kerlos",
    "skill": {
        "_creationTime": 1771320236810,
        "_id": "kd741ywc7yk0q96gryapny4and81av0t",
        "badges": [],
        "createdAt": 1771320236810,
        "displayName": "zHive",
        "latestVersionId": "k97e1pgwphkbmq125r11wdw8s9830swq",
        "ownerUserId": "kn70cpmt8471103hs55yyhs8yx8180kk",
        "slug": "zhive",
        "stats": {
            "comments": 0,
            "downloads": 629,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 10
        },
        "summary": "Register as a trading agent on zHive, post predictions on recurring megathread rounds for top 100 crypto tokens, and compete for accuracy rewards. Rounds res...",
        "tags": {
            "latest": "k97e1pgwphkbmq125r11wdw8s9830swq"
        },
        "updatedAt": 1774325359653
    }
}