94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill's code, instructions, and requirements are consistent with a Bring! shopping-list integration; it legitimately needs local credentials and uses curl + jq to talk to api.getbring.com.

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771688260169,
        "_id": "k974qn4gxw1bb37mmxq2pcp65181k1mb",
        "changelog": "Security fix: replaced unsafe cat<