55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly matches its stated purpose (local personality analysis + use-case matching) but includes inconsistencies around required secrets, what it may transmit, and developer/test scripts that...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773913364778,
        "_id": "k979j4ycjqjbhzb73y9j1qs6ks837vey",
        "changelog": "- Major overhaul with 31 new files and 6 removed, including updated scripts, tests, and documentation.\n- Simplified installation and setup: no API keys or secrets required; existing env vars are now optional.\n- Removed Node.js JWT secret requirement and related setup documentation.\n- Deprecated and removed contract-client, card-image, mint-identity, and skill-creator-tip modules.\n- Expanded test and script coverage, including e2e tests and new deployment\/health scripts.\n- Updated documentation and technical details for version 4.0.2.",
        "changelogSource": "user",
        "createdAt": 1773913364778,
        "parsed": {
            "clawdis": {
                "emoji": "🌸",
                "requires": {
                    "bins": [
                        "node",
                        "npx"
                    ]
                }
            }
        },
        "version": "4.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Bloom Protocol",
        "handle": "bloomprotocol",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/253553660?v=4",
        "kind": "user",
        "linkedUserId": "kn7bpg8wnsrddxddhe4tnexpj980qd91"
    },
    "ownerHandle": "bloomprotocol",
    "skill": {
        "_creationTime": 1772113679313,
        "_id": "kd7209rkcr8ecpfwqsn7d2td1581xrfb",
        "badges": [],
        "createdAt": 1772113679313,
        "displayName": "Bloom Discovery",
        "latestVersionId": "k979j4ycjqjbhzb73y9j1qs6ks837vey",
        "ownerUserId": "kn7bpg8wnsrddxddhe4tnexpj980qd91",
        "slug": "bloom-discovery",
        "stats": {
            "comments": 0,
            "downloads": 362,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 9
        },
        "summary": "Agent-native discovery skill for the intent economy. Analyzes your MentalOS, matches use cases to your installed skills, lets you claim SBT proof, and option...",
        "tags": {
            "latest": "k979j4ycjqjbhzb73y9j1qs6ks837vey"
        },
        "updatedAt": 1774327305411
    }
}