46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The skill's code matches its stated purpose (fetching B站 Top20) but the package metadata omits required runtimes/dependencies and has no install steps — this mismatch is unexpected and worth review be...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774422373153,
        "_id": "k979cjmbfpe1tncdbqjqjfvj1s83jvm8",
        "changelog": "- Migrated to OpenClaw standard Tool plugin architecture.\n- Introduced direct command dispatch, bypassing model inference.\n- Now uses Node.js Bridge to invoke the Python automation script.\n- Marked as user-invocable for direct use.",
        "changelogSource": "user",
        "createdAt": 1774422373153,
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s174a5d8nz41jayvfraefvktm983hef2",
        "displayName": "raise7727",
        "handle": "raise7727",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/203483347?v=4",
        "kind": "user",
        "linkedUserId": "kn72wfz91gvrs68xzfgcxk92yh83dp61"
    },
    "ownerHandle": "raise7727",
    "skill": {
        "_creationTime": 1774350918050,
        "_id": "kd7aj2xaapx3cnc1q44h7yr7k183gpf7",
        "badges": [],
        "createdAt": 1774350918050,
        "displayName": "B站推送附件",
        "latestVersionId": "k979cjmbfpe1tncdbqjqjfvj1s83jvm8",
        "ownerPublisherId": "s174a5d8nz41jayvfraefvktm983hef2",
        "ownerUserId": "kn72wfz91gvrs68xzfgcxk92yh83dp61",
        "slug": "bili-trending",
        "stats": {
            "comments": 0,
            "downloads": 33,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "获取B站Top20榜单，提取标题、摘要和链接。",
        "tags": {
            "latest": "k979cjmbfpe1tncdbqjqjfvj1s83jvm8"
        },
        "updatedAt": 1774422499246
    }
}