46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and instructions match a reverse‑engineered Gemini Web client, but it accesses browser cookies / Chrome profiles and uses environment variables not declared in metadata — behavior tha...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773976620080,
        "_id": "k9768xjdtwmjjjbjeccn2jz5bh839r7r",
        "changelog": "- No user-facing changes; version bump only.\n- No file changes detected.",
        "changelogSource": "auto",
        "createdAt": 1773976620080,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/github.com\/JimLiu\/baoyu-skills#baoyu-danger-gemini-web",
                "requires": {
                    "anyBins": [
                        "bun",
                        "npx"
                    ]
                }
            }
        },
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "nengnengZ",
        "handle": "nengnengz",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/124799184?v=4",
        "kind": "user",
        "linkedUserId": "kn713rjhtke43p3yf2kjsn8p9x836zjb"
    },
    "ownerHandle": "nengnengz",
    "skill": {
        "_creationTime": 1773976476190,
        "_id": "kd7ekdn5sjbm3cm59hdsbyhyp9839cjf",
        "badges": [],
        "createdAt": 1773976476190,
        "displayName": "Baoyu Danger Gemini Web",
        "latestVersionId": "k9768xjdtwmjjjbjeccn2jz5bh839r7r",
        "ownerUserId": "kn713rjhtke43p3yf2kjsn8p9x836zjb",
        "slug": "baoyu-danger-gemini-web-2",
        "stats": {
            "comments": 0,
            "downloads": 47,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Generates images and text via reverse-engineered Gemini Web API. Supports text generation, image generation from prompts, reference images for vision input,...",
        "tags": {
            "latest": "k9768xjdtwmjjjbjeccn2jz5bh839r7r"
        },
        "updatedAt": 1773976667967
    }
}