55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

360Guard's purpose and included scanner scripts mostly match (it's a security-vetting tool), but there are implementation issues and a prompt-injection signal that don't align with a trustworthy vetti...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773392600753,
        "_id": "k97emk2gtsdwh47v34qvhsd9yn82vwpd",
        "changelog": "360Guard v1.0.0 — Initial release of the comprehensive Skill security scanning tool.\n\n- Introduces \"360Guard\", a 360-degree Skill security review and risk classification system.\n- Adds detailed red flag checklists for static analysis, persistence, monitoring, privacy, network, execution, file system, supply chain, and social engineering.\n- Provides automatic risk-level classification and trust hierarchy guidance.\n- Includes two automated scripts: `quick-scan.sh` for fast checks and `full-scan.sh` for deep analysis and reporting.\n- Replaces prior knowledge management scripts with a security-focused scanner.",
        "changelogSource": "user",
        "createdAt": 1773392600753,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "robinc913",
        "handle": "robinc913",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/142384845?v=4",
        "kind": "user",
        "linkedUserId": "kn7517vexrgwbhxnqz7w2kaxbx80ahd7"
    },
    "ownerHandle": "robinc913",
    "skill": {
        "_creationTime": 1773392600753,
        "_id": "kd72t4pxyjj3q8z4f4tv07fq6d82v09n",
        "badges": [],
        "createdAt": 1773392600753,
        "displayName": "360Guard",
        "latestVersionId": "k97emk2gtsdwh47v34qvhsd9yn82vwpd",
        "ownerUserId": "kn7517vexrgwbhxnqz7w2kaxbx80ahd7",
        "slug": "360guard-skillvetter-upgrade-version",
        "stats": {
            "comments": 0,
            "downloads": 138,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "360-degree comprehensive security review Skill. Use before installing any Skill from ClawHub, GitHub, or other sources. Performs full security scans includin...",
        "tags": {
            "latest": "k97emk2gtsdwh47v34qvhsd9yn82vwpd",
            "skill vetter": "k97emk2gtsdwh47v34qvhsd9yn82vwpd"
        },
        "updatedAt": 1774332972595
    }
}