37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's documentation and runtime code disagree about the API endpoints and configuration options, and the bundled script collects device identifiers and reads undeclared environment variables tha...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773995706000,
        "_id": "k97e9h6mxnkpws02qd8vfaw8p1839dmv",
        "changelog": "- Updated polling and settlement handling after recharge order creation to return new fields: data.orderPolling and data.paymentSettled.\n- Instructions clarified: if data.paymentSettled=true, explicitly inform the user that recharge has arrived.\n- No changes to command usage or API endpoints.\n- Documentation refined to align behavior with updated script output.",
        "changelogSource": "auto",
        "createdAt": 1773995706000,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "0.5.12"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "weidd130",
        "handle": "weidd130",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/45308376?v=4",
        "kind": "user",
        "linkedUserId": "kn7671gzvp6qjqma9vswtb6a8183517v"
    },
    "ownerHandle": "weidd130",
    "skill": {
        "_creationTime": 1773838940072,
        "_id": "kd7fr517c8xdze6nax9380b46h834827",
        "badges": [],
        "createdAt": 1773838940072,
        "displayName": "BwInvoice",
        "latestVersionId": "k97e9h6mxnkpws02qd8vfaw8p1839dmv",
        "ownerUserId": "kn7671gzvp6qjqma9vswtb6a8183517v",
        "slug": "bw-invoice-verification-service",
        "stats": {
            "comments": 0,
            "downloads": 122,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 13
        },
        "summary": "Use the local invoice service script to initialize app keys, query quota and packages, verify invoice text or images, batch-verify local folders, and create...",
        "tags": {
            "latest": "k97e9h6mxnkpws02qd8vfaw8p1839dmv"
        },
        "updatedAt": 1774337249382
    }
}