59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's Azure DevOps commands are coherent, but the runtime instructions ask the agent to persist secrets and reference an undeclared config/env variable — the metadata and SKILL.md do not fully a...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770664564141,
        "_id": "k9789zgcxf1f515hdhgdp3ad0980vaq4",
        "changelog": "Initial release of Azure DevOps integration skill.\n\n- List Azure DevOps projects, repositories, and branches via simple commands.\n- Create and manage pull requests.\n- Handle work items and check build status.\n- Automatically checks for required configuration; prompts user for missing Personal Access Token or organization name and stores them securely.\n- Uses curl and jq for API interactions; requires AZURE_DEVOPS_PAT environment variable.\n- Clear documentation and command examples provided in SKILL.md.",
        "changelogSource": "user",
        "createdAt": 1770664564141,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "primaryEnv": "AZURE_DEVOPS_PAT",
                "requires": {
                    "bins": [
                        "curl",
                        "jq"
                    ],
                    "env": [
                        "AZURE_DEVOPS_PAT"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "PALs-Software",
        "handle": "pals-software",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/9398292?v=4",
        "kind": "user",
        "linkedUserId": "kn7fcaydc22jpp2mbrgsj8jffs80nxh3"
    },
    "ownerHandle": "pals-software",
    "skill": {
        "_creationTime": 1770664564141,
        "_id": "kd722ct95v2qebe69kqqztjzhx80vmph",
        "badges": [],
        "createdAt": 1770664564141,
        "displayName": "Azure DevOps",
        "latestVersionId": "k9789zgcxf1f515hdhgdp3ad0980vaq4",
        "ownerUserId": "kn7fcaydc22jpp2mbrgsj8jffs80nxh3",
        "slug": "azure-devops",
        "stats": {
            "comments": 0,
            "downloads": 1267,
            "installsAllTime": 7,
            "installsCurrent": 7,
            "stars": 1,
            "versions": 1
        },
        "summary": "List Azure DevOps projects, repositories, and branches; create pull requests; manage work items; check build status. Use when working with Azure DevOps resources, checking PR status, querying project structure, or automating DevOps workflows.",
        "tags": {
            "latest": "k9789zgcxf1f515hdhgdp3ad0980vaq4"
        },
        "updatedAt": 1772336600100
    }
}