65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (a security scanner) is coherent with its instructions, but it relies on running an external npm package via npx while declaring no required binaries/install — that dependen...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773399329397,
        "_id": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
        "changelog": "30 security rules, Python AST taint tracking, cross-file analysis, 8-language prompt injection detection, platform integration guide",
        "changelogSource": "user",
        "createdAt": 1773399329397,
        "version": "0.5.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Elliot Liu",
        "handle": "elliotllliu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/55885132?v=4",
        "kind": "user",
        "linkedUserId": "kn7eravwksn5m2t3341exrxyqs82t4y2"
    },
    "ownerHandle": "elliotllliu",
    "skill": {
        "_creationTime": 1773398942467,
        "_id": "kd73j5vghvcesbbmjw8tqs25x582vzne",
        "badges": [],
        "createdAt": 1773398942467,
        "displayName": "AgentShield Scanner",
        "latestVersionId": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
        "ownerUserId": "kn7eravwksn5m2t3341exrxyqs82t4y2",
        "slug": "agentshield-scanner",
        "stats": {
            "comments": 0,
            "downloads": 135,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Scan AI agent skills, MCP servers, and plugins for security vulnerabilities. Use when: user asks to check a skill\/plugin for safety, audit security, scan for...",
        "tags": {
            "agent": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
            "agent-security": "k975vj89qj79zzsd1xk5hykmxn82vma3",
            "audit": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
            "latest": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
            "mcp": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
            "prompt-injection": "k975vj89qj79zzsd1xk5hykmxn82vma3",
            "scanner": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
            "scanning": "k975vj89qj79zzsd1xk5hykmxn82vma3",
            "security": "k97bekn1jm1zmz4q9bm15bwmsn82t13f",
            "supply-chain": "k975vj89qj79zzsd1xk5hykmxn82vma3"
        },
        "updatedAt": 1774333070601
    }
}