by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing or using this skill: (1) Do NOT install or run agentns-client without reviewing the exact PyPI package and its source repo (verify the maintainer, code, and releases). (2) Treat any wallet.json/solana_wallet.json as highly sensitive — prefer creating a dedicated, low‑balance wallet or require manual signing (hardware wallet) rather than letting code auto-create and auto-pay. (3) Confirm the agentns project identity (agentns.xyz, GitHub repo, PyPI owner) and read the package cod...详细分析 ▾
ℹ 用途与能力
The skill's name/description (register/manage domains, DNS, pay in USDC) matches the runtime instructions: registrant contact info, wallet creation, and payments are indeed required for domain registration. Requesting PII and a funded crypto wallet is proportionate to ICANN registration and on-chain payments.
⚠ 指令范围
SKILL.md instructs installing a third-party PyPI package (agentns-client) and running it to auto-create wallet files (wallet.json/solana_wallet.json), authenticate (SIWE/SIWS), and perform payments automatically during register_domain(). Those runtime actions write files, handle private keys, sign/authenticate, and may submit on-chain payments — operations that go beyond simple API calls and have financial and privacy impact. The skill also prints or exposes wallet addresses and requires entering PII (name, address, phone, email).
⚠ 安装机制
The skill is instruction-only but instructs installing agentns-client from PyPI (and references a GitHub link). Because no code is bundled for audit, the actual behavior depends entirely on that external package. Installing an unreviewed package from PyPI carries risk (arbitrary code execution), especially since the package will manage keys and payments.
⚠ 凭证需求
No environment variables are requested, which is expected, but the skill causes creation/storage of sensitive artifacts (wallet files with private keys) and requires PII for registrant profiles. Those artifacts enable spending (USDC) and should be treated as high sensitivity; the skill does not document safeguards (e.g., manual signing, limits, or sandbox wallets). The financial access capability is proportionate to purpose but sensitive and needs stricter controls.
⚠ 持久化与权限
always:false (good) but model-invocation is allowed (default). Combined with instructions that create a local wallet and the client API that 'handles payment automatically' during registration, an agent with this skill could autonomously sign transactions and spend funds if it gains access to the wallet file. The skill does not describe requiring manual confirmation for payments or limiting transaction scope.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/1
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install agentns
镜像加速npx clawhub@latest install agentns --registry https://cn.longxiaskill.com