41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's core purpose (analyze chat to produce a supporter identity) is plausible, but there are notable mismatches and risky behaviors (auto-install from GitHub, undeclared env vars including a de...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770476160384,
        "_id": "k97exg4ybg01164m2cwnere84d80p5mg",
        "changelog": "**Bloom v2.0.1 Changelog**\n\n- Added skill-level permission manifest in SKILL.md to explicitly declare conversation, network, and crypto wallet access.\n- Improved documentation with a new \"Permissions & Capabilities\" section, clearly explaining required permissions, data handling, and security notes.\n- Enhanced privacy and data usage guidance, detailing local-only analysis and what user data is\/ isn't stored.\n- No core functionality changes; improvements focus on transparency and user control.",
        "changelogSource": "auto",
        "createdAt": 1770476160384,
        "version": "2.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Bloom Protocol",
        "handle": "bloomprotocol",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/253553660?v=4",
        "kind": "user",
        "linkedUserId": "kn7bpg8wnsrddxddhe4tnexpj980qd91"
    },
    "ownerHandle": "bloomprotocol",
    "skill": {
        "_creationTime": 1770475151266,
        "_id": "kd74d448td9zgq5dnkb6vd62yn80p8s2",
        "badges": [],
        "createdAt": 1770475151266,
        "displayName": "Bloom Supporter Identity",
        "latestVersionId": "k97exg4ybg01164m2cwnere84d80p5mg",
        "ownerUserId": "kn7bpg8wnsrddxddhe4tnexpj980qd91",
        "slug": "bloom",
        "stats": {
            "comments": 0,
            "downloads": 1175,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Discover your supporter personality and find AI tools you'll love. Get personalized recommendations, connect with your first 100 supporters, and search for skills that match how you work. For indie devs, vibe coders, and AI builders.",
        "tags": {
            "latest": "k97exg4ybg01164m2cwnere84d80p5mg"
        },
        "updatedAt": 1774323169180
    }
}