65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what its name/description say (a client for apihz.cn APIs), but there is an inconsistency that could expose credentials: the code can fall back to HTTP backup nodes and may send ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773066027707,
        "_id": "k97cygqpxnskftsg8zmx86szpn82jbf6",
        "changelog": "- Added TEST-REPORT-FINAL.md for reporting or test summary.\n- Updated documentation to highlight dynamic key (dkey) support, including improved security practices and usage.\n- Clarified that API list and configuration are now auto-synced and cached; enhanced instructions for first-time setup.\n- Expanded API usage examples for more endpoints, including POST\/GET notes and recommended routes.\n- Provided more detailed and explicit cron configuration instructions; clarified that users must set up scheduled tasks manually.\n- Added and updated interface route, security, and environment variable explanations to clarify multi-line (domain\/IP\/VIP) failover and dynamic key best practices.",
        "changelogSource": "user",
        "createdAt": 1773066027707,
        "version": "1.0.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "lihuiyang-03",
        "handle": "lihuiyang-03",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/216534866?v=4",
        "kind": "user",
        "linkedUserId": "kn743sdg1xe3mz3gm5ammbjm6x821ety"
    },
    "ownerHandle": "lihuiyang-03",
    "skill": {
        "_creationTime": 1773046449332,
        "_id": "kd725pcxrm7xdarjtkeyne1cgx82jsw5",
        "badges": [],
        "createdAt": 1773046449332,
        "displayName": "apihz-cn",
        "latestVersionId": "k97cygqpxnskftsg8zmx86szpn82jbf6",
        "ownerUserId": "kn743sdg1xe3mz3gm5ammbjm6x821ety",
        "slug": "apihz-cn-skill",
        "stats": {
            "comments": 0,
            "downloads": 266,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 5
        },
        "summary": "409+ 企业级 API 接口 — 天气\/地震\/IP 归属地\/临时邮箱\/翻译等，稳定高效",
        "tags": {
            "latest": "k97cygqpxnskftsg8zmx86szpn82jbf6"
        },
        "updatedAt": 1774330839622
    }
}