100/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： clean

OpenClaw： benign

The skill does what it says: it scans the user's skills directory for likely hardcoded keys and can write discovered values into openclaw.json; no external network exfiltration or unrelated capabiliti...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773913057232,
        "_id": "k978m0mds65nqwnnm6qqbpndkn837grr",
        "changelog": "Initial release — scans and audits hardcoded API keys and credentials in the skills directory, with optional migration to central config.\n\n- Scans all files in ~\/.openclaw\/workspace\/skills for hardcoded API keys, tokens, and secrets.\n- Reports integration status: integrated in openclaw.json, managed by mcporter, or not yet integrated.\n- Supports read-only audit and --fix mode for automatic migration of unregistered credentials to openclaw.json env.vars.\n- Skips sample values and mcporter-managed keys to avoid false positives.\n- Clear instructions provided for manual replacement and integration workflow.",
        "changelogSource": "user",
        "createdAt": 1773913057232,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "lemonGGGit",
        "handle": "lemongggit",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/36196725?v=4",
        "kind": "user",
        "linkedUserId": "kn7ecg3j40658rvfcmyazs2w85836ac5"
    },
    "ownerHandle": "lemongggit",
    "skill": {
        "_creationTime": 1773913057232,
        "_id": "kd726e0pj9501en1w2hz3rka5d837zrg",
        "badges": [],
        "createdAt": 1773913057232,
        "displayName": "api-key-auditor",
        "latestVersionId": "k978m0mds65nqwnnm6qqbpndkn837grr",
        "ownerUserId": "kn7ecg3j40658rvfcmyazs2w85836ac5",
        "slug": "api-key-auditor",
        "stats": {
            "comments": 1,
            "downloads": 46,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "扫描 ~\/.openclaw\/workspace\/skills 目录下所有文件中的硬编码 API Key、Token、Secret，检查是否已集成到 openclaw.json env.vars，并可自动将未集成的凭证迁移进去。Use when user asks to audit\/check\/scan for...",
        "tags": {
            "latest": "k978m0mds65nqwnnm6qqbpndkn837grr"
        },
        "updatedAt": 1773919611794
    }
}