55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The package appears to implement the advertised security scanner, but there are multiple mismatches and risky behaviors (prompt-injection markers in SKILL.md, an install script, scheduled/daemon/webho...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dynamic_code_execution

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773645575073,
        "_id": "k97d6e9as9v6w86jc8y3aadfss831dxg",
        "changelog": "- Added extensive new detection rules and whitelist data files.\n- Introduced report generation scripts and automated release checking utilities.\n- Updated core documentation (README.md, SKILL.md, RELEASE.md) for new features and workflows.\n- Removed outdated or redundant guides and older incident documentation.\n- Improved data organization for detection rules and false positive management.",
        "changelogSource": "auto",
        "createdAt": 1773645575073,
        "parsed": {
            "clawdis": {
                "author": "Security Team"
            }
        },
        "version": "2.2.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "caidongyun",
        "handle": "caidongyun",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1638934?v=4",
        "kind": "user",
        "linkedUserId": "kn7b15wqp8qq0czrb0d960rcrd82s62k"
    },
    "ownerHandle": "caidongyun",
    "skill": {
        "_creationTime": 1773462902155,
        "_id": "kd7e4fhxvcpq9bhtp5430mnys182wach",
        "badges": [],
        "createdAt": 1773462902155,
        "displayName": "Agent Security Skill Scanner",
        "latestVersionId": "k97d6e9as9v6w86jc8y3aadfss831dxg",
        "ownerUserId": "kn7b15wqp8qq0czrb0d960rcrd82s62k",
        "slug": "agent-security-skill-scanner",
        "stats": {
            "comments": 0,
            "downloads": 136,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 2
        },
        "summary": "AI Agent 技能安全扫描器 - 检测恶意技能、后门代码、权限滥用 (Beta 版本)",
        "tags": {
            "agent": "k97fb4qnjkb4bbcqed6bqzaq7s82xrdx",
            "beta": "k97fb4qnjkb4bbcqed6bqzaq7s82xrdx",
            "latest": "k97d6e9as9v6w86jc8y3aadfss831dxg",
            "scanner": "k97fb4qnjkb4bbcqed6bqzaq7s82xrdx",
            "security": "k97fb4qnjkb4bbcqed6bqzaq7s82xrdx"
        },
        "updatedAt": 1774333456998
    }
}