41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and runtime instructions match an ECS monitoring tool, but the package metadata omits required AWS credentials and required environment variables — a mismatch that should be resolved ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771529230156,
        "_id": "k976b2hz5445757fxczy51z8xs81fv9g",
        "changelog": "Fix security scan flags: declare runtime dependencies, document env vars and write paths",
        "changelogSource": "user",
        "createdAt": 1771529230156,
        "parsed": {
            "clawdis": {
                "requires": {
                    "anyBins": [
                        "openssl"
                    ],
                    "bins": [
                        "aws",
                        "curl",
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Brian Colinger",
        "handle": "briancolinger",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8125655?v=4",
        "kind": "user",
        "linkedUserId": "kn701kzxq5tkxw9mypbmspqw5580cxew"
    },
    "ownerHandle": "briancolinger",
    "skill": {
        "_creationTime": 1770066711366,
        "_id": "kd77qcjenas5ghswrpgqf5sbnn80cfdz",
        "badges": [],
        "createdAt": 1770066711366,
        "displayName": "aws-ecs-monitor",
        "latestVersionId": "k976b2hz5445757fxczy51z8xs81fv9g",
        "ownerUserId": "kn701kzxq5tkxw9mypbmspqw5580cxew",
        "slug": "aws-ecs-monitor",
        "stats": {
            "comments": 0,
            "downloads": 1720,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 0,
            "versions": 2
        },
        "summary": "AWS ECS production health monitoring with CloudWatch log analysis — monitors ECS service health, ALB targets, SSL certificates, and provides deep CloudWatch...",
        "tags": {
            "latest": "k976b2hz5445757fxczy51z8xs81fv9g"
        },
        "updatedAt": 1774322302233
    }
}