47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill largely does what it says (calls Tencent Cloud Smart Advisor APIs) but contains several inconsistencies and risky practices (permanent AK/SK persistence, undeclared external dependency, inse...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774333605776,
        "_id": "k97583x79qzmb6w0n5g7691nwh83hqtd",
        "changelog": "cloudq-sre 1.0.0 – Initial Release\n\n- Introduces a helper for Tencent Cloud Smart Advisor, enabling authenticated API calls with AK\/SK.\n- Supports cloud architecture diagram management (list\/query architecture directories, get diagrams and details, view assessment results).\n- Provides risk\/assessment querying, filtering by product\/group\/risk level.\n- Supports granting permissions (CreateAdvisorAuthorization) after explicit user consent.\n- Command-line setup covering environment detection, role\/IAM configuration, and secure credential handling.\n- Data access limited to current account only; cross-account queries are blocked with user guidance about AK\/SK context.\n- All operations require initializing and verifying environment through provided scripts before use.",
        "changelogSource": "user",
        "createdAt": 1774333605776,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "requires": {
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "TENCENTCLOUD_SECRET_ID",
                        "TENCENTCLOUD_SECRET_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17aajxmtd86aenfys6d2sp3e183gqz0",
        "displayName": "Tencent CloudQ Team",
        "handle": "2513483494",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/48058550?v=4",
        "kind": "user",
        "linkedUserId": "kn72bwrsd0h6f2znmcm9kh2yms83ggaq"
    },
    "ownerHandle": "2513483494",
    "skill": {
        "_creationTime": 1774333605776,
        "_id": "kd77xnncqv1e564bhpnzyh048x83hf2d",
        "badges": [],
        "createdAt": 1774333605776,
        "displayName": "Architecture SLA Tracker by CloudQ",
        "latestVersionId": "k97583x79qzmb6w0n5g7691nwh83hqtd",
        "ownerPublisherId": "s17aajxmtd86aenfys6d2sp3e183gqz0",
        "ownerUserId": "kn72bwrsd0h6f2znmcm9kh2yms83ggaq",
        "slug": "arch-sla-cloudq",
        "stats": {
            "comments": 0,
            "downloads": 11,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "腾讯云智能顾问助手 — 通过 AK\/SK 鉴权调用腾讯云智能顾问 API，管理云架构图（查询目录、获取架构列表和详情、获取架构评估结果）及风险评估（查询评估项、按产品\/分组\/风险等级筛选），支持开通智能顾问服务。当用户要求查看云架构、查询架构目录、获取架构详情、查看架构评估结果、查看风险评估项、巡检项、云资源风险...",
        "tags": {
            "Arch": "k97583x79qzmb6w0n5g7691nwh83hqtd",
            "SLA": "k97583x79qzmb6w0n5g7691nwh83hqtd",
            "latest": "k97583x79qzmb6w0n5g7691nwh83hqtd"
        },
        "updatedAt": 1774334213689
    }
}