41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it says (identify birds, track sightings, generate cards) but it sends user identifiers and sighting data to an external API and expects local secrets/files in ways that are...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771462962922,
        "_id": "k971y13wp8rxxz72gpxat8fccx81fv9d",
        "changelog": "Initial release — AI bird ID, life list tracking, trading cards, PWA, Cloudflare R2, Railway API",
        "changelogSource": "user",
        "createdAt": 1771462962922,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "tonbi",
        "handle": "tonbistudio",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/193647965?v=4",
        "kind": "user",
        "linkedUserId": "kn78aanaf5prsasc1jjvmy9bqn80xdzp"
    },
    "ownerHandle": "tonbistudio",
    "skill": {
        "_creationTime": 1771462962922,
        "_id": "kd7fxa52b055wd1bdb6trbwey181ehya",
        "badges": [],
        "createdAt": 1771462962922,
        "displayName": "Birdfolio",
        "latestVersionId": "k971y13wp8rxxz72gpxat8fccx81fv9d",
        "ownerUserId": "kn78aanaf5prsasc1jjvmy9bqn80xdzp",
        "slug": "birdfolio",
        "stats": {
            "comments": 0,
            "downloads": 483,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Bird identification, life list tracking, and trading card generation. Use this skill when the user: sends a bird photo to identify, says \"set up my Birdfolio...",
        "tags": {
            "latest": "k971y13wp8rxxz72gpxat8fccx81fv9d"
        },
        "updatedAt": 1774325681464
    }
}