41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's declared metadata omits that it requires the 'bun' binary and the scripts allow arbitrary shell commands and network requests without sanitization — coherent with the stated purpose but di...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769840559259,
        "_id": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
        "changelog": "Version 1.0.0\n\n- Initial release of the bun-runtime skill.\n- Provides native Bun operations for filesystem (read, write, glob), process commands, and network requests.\n- Scripts utilize Bun APIs for optimized performance and I\/O tasks.\n- Automatically manages file encodings and directory creation.\n- Returns clear, JSON-formatted results and error messages.",
        "changelogSource": "user",
        "createdAt": 1769840559259,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "rabin-thami",
        "handle": "rabin-thami",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/44690395?v=4",
        "kind": "user",
        "linkedUserId": "kn702v3s7ygw96aqt8qfw78pxn809nw8"
    },
    "ownerHandle": "rabin-thami",
    "skill": {
        "_creationTime": 1769840559259,
        "_id": "kd7esct14xmezpsctg3y9gjehh809zcc",
        "createdAt": 1769840559259,
        "displayName": "Bun Runtime",
        "latestVersionId": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
        "ownerUserId": "kn702v3s7ygw96aqt8qfw78pxn809nw8",
        "slug": "bun-runtime",
        "stats": {
            "comments": 0,
            "downloads": 1776,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 0,
            "versions": 1
        },
        "summary": "Bun runtime capabilities for filesystem, process, and network operations. Use when you need to execute Bun-specific operations like Bun.file(), Bun.write(), or Bun.glob() for optimized file handling, or when working with Bun's native process\/network APIs. Triggered by requests for Bun runtime features, file operations with Bun, or high-performance I\/O tasks.",
        "tags": {
            "bun": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
            "cli": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
            "devtools": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
            "filesystem": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
            "latest": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
            "network": "k97d7mh0za1bhekx1cfqqy8sj9809da9",
            "process": "k97d7mh0za1bhekx1cfqqy8sj9809da9"
        },
        "updatedAt": 1774321831026
    }
}