56/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： clean

OpenClaw： suspicious

The skill mostly matches its stated purpose (AIOZ pinning) but contains multiple internal inconsistencies around how credentials are supplied and documented, which could lead to accidental secret expo...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774584221206,
        "_id": "k977tkmsdbxw26ww2xgbma4qy583q5a3",
        "changelog": "**Security update: Prevent passing credentials as CLI arguments.**\n\n- Added prominent warning not to pass credentials (API key, secret, or JWT) as command-line arguments—scripts must read these exclusively from environment variables.\n- Updated instructions and all script examples to reinforce the credential usage policy.\n- Clarified that providing credentials as script arguments is a security violation and increases exposure risk.\n- Adjusted documentation for greater emphasis on secure environment practices before running any scripts.\n- No changes to available features or functionality.",
        "changelogSource": "user",
        "createdAt": 1774584221206,
        "parsed": {
            "clawdis": {
                "emoji": "📌",
                "requires": {
                    "bins": [
                        "curl",
                        "jq"
                    ]
                }
            }
        },
        "version": "1.0.7"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17fx03yhvaw8hjyb3p4mq5zz183j1x3",
        "displayName": "namle-aioz",
        "handle": "namle-aioz",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/265162279?v=4",
        "kind": "user",
        "linkedUserId": "kn76mav8k3cqww8y2evzmt7nnd83kezy"
    },
    "ownerHandle": "namle-aioz",
    "skill": {
        "_creationTime": 1774536162448,
        "_id": "kd76z8dk1fwqqfk0syxxg71j2183n4wg",
        "badges": [],
        "createdAt": 1774536162448,
        "displayName": "AIOZ Pin Toolkit",
        "latestVersionId": "k977tkmsdbxw26ww2xgbma4qy583q5a3",
        "ownerPublisherId": "s17fx03yhvaw8hjyb3p4mq5zz183j1x3",
        "ownerUserId": "kn76mav8k3cqww8y2evzmt7nnd83kezy",
        "slug": "aioz-pin-toolkit",
        "stats": {
            "comments": 0,
            "downloads": 39,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 8
        },
        "summary": "Respond to user requests for AIOZ Pin API. Use provided scripts to manage API keys, pin files to IPFS, track usage, and more.",
        "tags": {
            "latest": "k977tkmsdbxw26ww2xgbma4qy583q5a3"
        },
        "updatedAt": 1774584242513
    }
}