47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill is generally consistent with a local secrets vault, but design and implementation choices (insecure stdlib crypto fallback, broad filesystem scanning/import, external network calls, and writ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774059514122,
        "_id": "k975kb22gbj0nyrd8m091jfgeh83abn3",
        "changelog": "Initial release: ClawKeep 1.0.0\n\n- Launch of an AES-256 encrypted secrets manager for OpenClaw agents.\n- Securely stores API keys, tokens, and credentials in a local vault with master password, machine\/IP binding, and .env migration.\n- Provides cross-skill secret sharing, per-skill access logging, and command-line\/`inject_vault_env` integration.\n- Implements flexible lock modes: password, machine, static IP, and combined restrictions.\n- Includes a detailed security model using PBKDF2-HMAC-SHA256, HMAC integrity, and zero plaintext storage.\n- New CLI and Python interfaces for adding, retrieving, importing, and auditing secrets.",
        "changelogSource": "user",
        "createdAt": 1774059514122,
        "parsed": {
            "clawdis": {
                "author": "PHRAIMWORK LLC",
                "emoji": "🔐"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "SuperTechGod",
        "handle": "supertechgod",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/212455961?v=4",
        "kind": "user",
        "linkedUserId": "kn7emn69p2b9mcfc9hwthxwfv9838g4y"
    },
    "ownerHandle": "supertechgod",
    "skill": {
        "_creationTime": 1774059514122,
        "_id": "kd73j05h5wp9eh9k4bxtdxvwqh83bd2w",
        "badges": [],
        "createdAt": 1774059514122,
        "displayName": "ArmorClaw",
        "latestVersionId": "k975kb22gbj0nyrd8m091jfgeh83abn3",
        "ownerUserId": "kn7emn69p2b9mcfc9hwthxwfv9838g4y",
        "slug": "armorclaw",
        "stats": {
            "comments": 0,
            "downloads": 25,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "AES-256 encrypted secrets manager for OpenClaw agents. Store API keys, tokens, and credentials in a secure local vault instead of plain-text .env files. Feat...",
        "tags": {
            "api-keys": "k975kb22gbj0nyrd8m091jfgeh83abn3",
            "latest": "k975kb22gbj0nyrd8m091jfgeh83abn3",
            "openclaw": "k975kb22gbj0nyrd8m091jfgeh83abn3",
            "secrets": "k975kb22gbj0nyrd8m091jfgeh83abn3",
            "security": "k975kb22gbj0nyrd8m091jfgeh83abn3",
            "vault": "k975kb22gbj0nyrd8m091jfgeh83abn3"
        },
        "updatedAt": 1774059708030
    }
}