41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (posting to X via a real Chrome session) matches the code, but the package metadata omits important prerequisites and the instructions/scripts access sensitive local state (...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770263078722,
        "_id": "k976rwz0nbtvbxdr6wm7xfmbsx80kxka",
        "changelog": "Initial release of baoyu-post-to-x – post content, images, videos, and articles to X (Twitter) using real Chrome automation.\n\n- Supports regular posts (text + up to 4 images), video uploads, quote tweets, and X Articles (Markdown long-form, for Premium users).\n- Uses Chrome CDP to bypass anti-automation measures.\n- Includes script directory layout and agent execution instructions.\n- Preferences and custom settings supported via EXTEND.md at project or user level.\n- First-time login to X is interactive and session persists for later use.\n- Reference guides provided for troubleshooting and article workflow.",
        "changelogSource": "auto",
        "createdAt": 1770263078722,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "liuhedev",
        "handle": "liuhedev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/19663285?v=4",
        "kind": "user",
        "linkedUserId": "kn77mhx9mjnxw06ex5g2rr66ns80kwqt"
    },
    "ownerHandle": "liuhedev",
    "skill": {
        "_creationTime": 1770263078722,
        "_id": "kd7ezs6s0w03h0beeq4qaa8xys80j2wt",
        "badges": [],
        "createdAt": 1770263078722,
        "displayName": "Baoyu Post To X",
        "latestVersionId": "k976rwz0nbtvbxdr6wm7xfmbsx80kxka",
        "ownerUserId": "kn77mhx9mjnxw06ex5g2rr66ns80kwqt",
        "slug": "baoyu-post-to-x",
        "stats": {
            "comments": 0,
            "downloads": 1814,
            "installsAllTime": 30,
            "installsCurrent": 30,
            "stars": 2,
            "versions": 1
        },
        "summary": "Posts content and articles to X (Twitter). Supports regular posts with images\/videos and X Articles (long-form Markdown). Uses real Chrome with CDP to bypass anti-automation. Use when user asks to \"post to X\", \"tweet\", \"publish to Twitter\", or \"share on X\".",
        "tags": {
            "latest": "k976rwz0nbtvbxdr6wm7xfmbsx80kxka"
        },
        "updatedAt": 1774322674051
    }
}