47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's behavior mostly matches its description, but it instructs the agent to download and execute an external WASM component (from a third‑party GitHub raw URL) which increases risk and is not i...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774713434571,
        "_id": "k973yrg4kmztktcz6hefn6x9zx83swtd",
        "changelog": "boxed_curl v1.0.0\n\n- Initial release providing sandboxed (WASM-based) execution of curl-like HTTP requests.\n- Supports GET, POST, HTTP headers, and request bodies, with per-host network isolation via allowedOutboundHosts.\n- Requires openclaw-wasm-sandbox plugin v0.2.0+ and a local boxed_curl_component.wasm file.\n- Includes automatic extraction of curl arguments and outbound host restriction based on the target URL.\n- Provides example usage patterns and options matrix; explicit documentation for setup and key usage tips.",
        "changelogSource": "user",
        "createdAt": 1774713434571,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1791jtrp7z0s6h87f8f0twdk183pq6y",
        "displayName": "guyoung",
        "handle": "guyoung",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1448308?v=4",
        "kind": "user",
        "linkedUserId": "kn76yrtrr32eqwygjzwbs52rfs83q1rx"
    },
    "ownerHandle": "guyoung",
    "skill": {
        "_creationTime": 1774713434571,
        "_id": "kd7b6f2b3r3scv8fnyh4jn3svs83rawh",
        "badges": [],
        "createdAt": 1774713434571,
        "displayName": "Boxed Curl",
        "latestVersionId": "k973yrg4kmztktcz6hefn6x9zx83swtd",
        "ownerPublisherId": "s1791jtrp7z0s6h87f8f0twdk183pq6y",
        "ownerUserId": "kn76yrtrr32eqwygjzwbs52rfs83q1rx",
        "slug": "boxed-curl",
        "stats": {
            "comments": 0,
            "downloads": 20,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Run curl requests safely in a sandbox, supporting GET\/POST\/HTTP headers, with complete network isolation.",
        "tags": {
            "latest": "k973yrg4kmztktcz6hefn6x9zx83swtd"
        },
        "updatedAt": 1774714916045
    }
}