46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The skill's purpose (URL → Markdown) is coherent with its code, but its auto-trigger Hook executes an external script via a shell command with insufficient escaping, creating a clear command-injection...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774572181758,
        "_id": "k97amt9e11zjrc4ch6n3y1kz6x83pmav",
        "changelog": "No file changes detected in this version.\n\n- No functional or documentation changes.\n- Version incremented for maintenance or procedural reasons only.",
        "changelogSource": "auto",
        "createdAt": 1774572181758,
        "version": "4.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17cx76kk5gxt1ztfactgb6trx83gerc",
        "displayName": "Amber03",
        "handle": "lsa03",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/35926843?v=4",
        "kind": "user",
        "linkedUserId": "kn7dqa5shme91x0qr39kjptgn1825z5t"
    },
    "ownerHandle": "lsa03",
    "skill": {
        "_creationTime": 1774195501665,
        "_id": "kd7djv4618547rw0a76m8h0bx583d3jh",
        "badges": [],
        "createdAt": 1774195501665,
        "displayName": "Amber Url To Markdown",
        "latestVersionId": "k97amt9e11zjrc4ch6n3y1kz6x83pmav",
        "ownerPublisherId": "s17cx76kk5gxt1ztfactgb6trx83gerc",
        "ownerUserId": "kn7dqa5shme91x0qr39kjptgn1825z5t",
        "slug": "amber-url-to-markdown",
        "stats": {
            "comments": 0,
            "downloads": 100,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 8
        },
        "summary": "智能 URL 转 Markdown 工具（V4.0 可扩展架构）。**支持自动触发 Hook**，当用户发送 URL 链接时自动抓取内容并转换为 Markdown 格式。采用可扩展的分类处理架构，支持豆包、微信公众号、知乎、掘金等网站。",
        "tags": {
            "latest": "k97amt9e11zjrc4ch6n3y1kz6x83pmav"
        },
        "updatedAt": 1774573014979
    }
}