41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's description (read-only order stats) is plausible, but the runtime instructions contain multiple inconsistencies and omissions (missing declared env vars/binaries, contradictory SQL require...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772855181605,
        "_id": "k9764zdp5ta33pt902zcwy6xnh82f646",
        "changelog": "app-order-business-stats v1.0.0\n\n- Initial release: Provides business metrics for app orders by time period and business segment.\n- Strictly uses a fixed SQL template for data queries with enforced placeholders for time range.\n- Supports queries for user count, order count, payment, refund, and net sales by segment.\n- Replies only in daily aggregation; does not support hourly breakdowns.\n- Ensures only secure, read-only operations using restricted database access.",
        "changelogSource": "auto",
        "createdAt": 1772855181605,
        "parsed": {
            "clawdis": {
                "author": "jagger"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jaggerliu",
        "handle": "jaggerliu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10110630?v=4",
        "kind": "user",
        "linkedUserId": "kn75zjvwnkxytb24zcmy6vpwbn825dar"
    },
    "ownerHandle": "jaggerliu",
    "skill": {
        "_creationTime": 1772855181605,
        "_id": "kd73zmqt3b7kvk0h29vpfs39n982enac",
        "badges": [],
        "createdAt": 1772855181605,
        "displayName": "App Order Business Stats",
        "latestVersionId": "k9764zdp5ta33pt902zcwy6xnh82f646",
        "ownerUserId": "kn75zjvwnkxytb24zcmy6vpwbn825dar",
        "slug": "app-order-business-stats",
        "stats": {
            "comments": 0,
            "downloads": 267,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "按时间段和业务版块统计久事体育APP订单关键指标（业务版块、用户数、订单量、支付金额、退款金额、净销售金额）。适用于查询“某段时间内业务版块的订单”相关统计。",
        "tags": {
            "latest": "k9764zdp5ta33pt902zcwy6xnh82f646"
        },
        "updatedAt": 1774330172341
    }
}