59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose and required tools (curl, python3) are plausible, but the runtime instructions are ambiguous about filesystem and environment access (including a worrying line that it 'has ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771988601324,
        "_id": "k975yre2gkp66y4n3n0tepqzj981v9zs",
        "changelog": "**Adds risk-class contradiction detection to scope expansion analysis.**\n\n- Introduces detection of mismatches between a skill’s self-declared risk category and its actual capability footprint.\n- Updated capability list to include `risk-class-contradiction-detection`.\n- Documentation now describes how risk-class contradiction is used as an additional security signal.\n- No functional changes beyond enhanced reporting and analysis.",
        "changelogSource": "auto",
        "createdAt": 1771988601324,
        "parsed": {
            "clawdis": {
                "emoji": "🔭",
                "requires": {
                    "bins": [
                        "curl",
                        "python3"
                    ]
                }
            }
        },
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "andyxinweiminicloud",
        "handle": "andyxinweiminicloud",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/201528876?v=4",
        "kind": "user",
        "linkedUserId": "kn774taf7vj1tv67nx5x4aaccx81k63s"
    },
    "ownerHandle": "andyxinweiminicloud",
    "skill": {
        "_creationTime": 1771856844198,
        "_id": "kd7fzy9d01jjwc0bt1e0eyjtj981qr3k",
        "badges": [],
        "createdAt": 1771856844198,
        "displayName": "Capability Scope Expansion Watcher",
        "latestVersionId": "k975yre2gkp66y4n3n0tepqzj981v9zs",
        "ownerUserId": "kn774taf7vj1tv67nx5x4aaccx81k63s",
        "slug": "capability-scope-expansion-watcher",
        "stats": {
            "comments": 0,
            "downloads": 383,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "Helps detect incremental capability scope expansion across skill versions — the pattern where a skill gradually claims broader permissions through small, ind...",
        "tags": {
            "latest": "k975yre2gkp66y4n3n0tepqzj981v9zs"
        },
        "updatedAt": 1772064640938
    }
}