41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally does what it claims (parse Telegram messages and POST an order) but the repository contains contradictory documentation, UI-automation scripts (Playwright) and plaintext credential...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772625907006,
        "_id": "k9767p9n2kx7qjbvevgcqjeyxs828m46",
        "changelog": "- Initial release: Adds support for parsing \"Roty input\" messages and creating Roty orders via HTTPS POST only.\n- Requires exact \"Roty input\" trigger phrase (case-insensitive).\n- Only authorized Telegram users (admins or vendors) may use this skill.\n- Handles messy message parsing, price calculation (via pricing_engine.py), and payload building.\n- Automatically POSTs orders unless required info is missing; prompts user for any missing fields.\n- No Playwright\/browser automation; HTTPS POST only.",
        "changelogSource": "auto",
        "createdAt": 1772625907006,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Horng Yang Tan",
        "handle": "horngtan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/122249296?v=4",
        "kind": "user",
        "linkedUserId": "kn76qjghjd9rrphxzdn3pva1th829m1s"
    },
    "ownerHandle": "horngtan",
    "skill": {
        "_creationTime": 1772625907006,
        "_id": "kd76ghvr74vm6s94g9968bfv4h828h40",
        "badges": [],
        "createdAt": 1772625907006,
        "displayName": "Roty Tiffin Skill",
        "latestVersionId": "k9767p9n2kx7qjbvevgcqjeyxs828m46",
        "ownerUserId": "kn76qjghjd9rrphxzdn3pva1th829m1s",
        "slug": "add-tiffin-order-roty-input",
        "stats": {
            "comments": 0,
            "downloads": 197,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Parse \"Roty input\" messages from authorized Telegram users to create Roty tiffin orders via HTTPS POST without UI automation.",
        "tags": {
            "latest": "k9767p9n2kx7qjbvevgcqjeyxs828m46"
        },
        "updatedAt": 1774329126867
    }
}