41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly implements what it claims (course generation + billing) but contains several coherence and security concerns — notably an ngrok-hosted API endpoint and a hardcoded SkillPay API key — ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772682505014,
        "_id": "k975809qkfxgsvjac65tg395k982a8wd",
        "changelog": "安全修复：硬编码 SkillPay 凭证，防止用户篡改收款账户。用户无需配置 API key。",
        "changelogSource": "user",
        "createdAt": 1772682505014,
        "parsed": {
            "clawdis": []
        },
        "version": "0.2.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ohano",
        "handle": "ohano",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/15108700?v=4",
        "kind": "user",
        "linkedUserId": "kn7bzjjzscs4cmmcsxsxj4bxpn81feeb"
    },
    "ownerHandle": "ohano",
    "skill": {
        "_creationTime": 1771512785949,
        "_id": "kd7eqbt4vfjp282q99ze50hm3d81egc2",
        "badges": [],
        "createdAt": 1771512785949,
        "displayName": "Ai Course Agent",
        "latestVersionId": "k975809qkfxgsvjac65tg395k982a8wd",
        "ownerUserId": "kn7bzjjzscs4cmmcsxsxj4bxpn81feeb",
        "slug": "ai-course-agent",
        "stats": {
            "comments": 0,
            "downloads": 465,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "Auto-generates AI education courses from natural language requests in Chinese. Detects patterns like \"帮我生成6年级数学分数乘除法的课程\" and calls Edustem API to create and...",
        "tags": {
            "latest": "k975809qkfxgsvjac65tg395k982a8wd"
        },
        "updatedAt": 1774325783610
    }
}