41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's files and instructions generally match the stated governance purpose, but there are a few implementation and supply-chain risks (unsafe shell→python string interpolation, ambiguous key han...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771365144667,
        "_id": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
        "changelog": "- Initial release of agentmesh-governance for OpenClaw agents.\n- Provides command-line scripts to enforce policies, check trust scores, verify identities (Ed25519 DIDs), and maintain tamper-evident Merkle chain audit logs.\n- Supports policy enforcement for token limits, tool allow\/blocklists, content patterns, trust thresholds, and optional human approval.\n- Enables agent trust scoring across five dimensions and automated blocking of low-trust agents.\n- CLI tools for generating agent identities, updating trust after collaboration, and verifying audit log integrity.\n- Designed for seamless integration with AgentMesh, supporting enterprise compliance and governance needs.",
        "changelogSource": "user",
        "createdAt": 1771365144667,
        "parsed": {
            "clawdis": {
                "emoji": "🛡️",
                "homepage": "https:\/\/github.com\/imran-siddique\/agentmesh-integrations\/tree\/master\/openclaw-skill",
                "requires": {
                    "bins": [
                        "python3",
                        "pip"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "imran-siddique",
        "handle": "imran-siddique",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/45405841?v=4",
        "kind": "user",
        "linkedUserId": "kn7cc3dc08z9jtthrd931eb2q581azet"
    },
    "ownerHandle": "imran-siddique",
    "skill": {
        "_creationTime": 1771365144667,
        "_id": "kd78rc4azbmjq3xhfsbttcgd3581bf03",
        "badges": [],
        "createdAt": 1771365144667,
        "displayName": "AgentMesh Governance",
        "latestVersionId": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
        "ownerUserId": "kn7cc3dc08z9jtthrd931eb2q581azet",
        "slug": "agentmesh-governance",
        "stats": {
            "comments": 4,
            "downloads": 574,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 0,
            "versions": 1
        },
        "summary": "AI agent governance, trust scoring, and policy enforcement powered by AgentMesh. Activate when: (1) user wants to enforce token limits, tool restrictions, or...",
        "tags": {
            "audit": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "enterprise": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "governance": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "identity": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "latest": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "multi-agent": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "security": "k974be3w8km5m2zrvr13hs7rdn81bc6r",
            "trust": "k974be3w8km5m2zrvr13hs7rdn81bc6r"
        },
        "updatedAt": 1774325465951
    }
}