65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it says (call Chanjing APIs to create images/videos and poll tasks) but its declared metadata omits required credentials and it will run a sibling script and read/write a lo...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774608317497,
        "_id": "k97djkjthfb7sx709zvzn08ac583qmd3",
        "changelog": "**Summary:**  \nThis release formalizes environment variables and credential handling, adds a machine-readable manifest, and aligns documentation to the manifest model.\n\n- Added manifest.yaml for machine-readable skill metadata and environment declarations.\n- Deprecated SKILL.md-specific credential\/environment documentation in favor of single-source manifest.yaml.\n- Updated environment variable names to CHANJING_OPENAPI_CREDENTIALS_DIR and CHANJING_OPENAPI_BASE_URL (legacy names still accepted for backward compatibility).\n- Clarified in documentation that all credential, permission, and agentPolicy details are defined in manifest.yaml.\n- No changes to core script logic; scripts\/_auth.py and scripts\/_task_api.py are unchanged in function.\n- ffmpeg\/ffprobe requirements remain unchanged (not required).",
        "changelogSource": "auto",
        "createdAt": 1774608317497,
        "version": "1.0.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17dzfw0aahqzz6dr91bzpma4h83gh5n",
        "displayName": "BinKes",
        "handle": "binkes",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7719663?v=4",
        "kind": "user",
        "linkedUserId": "kn7eezc93vqy58g3xkkwm9jr1x8366f3"
    },
    "ownerHandle": "binkes",
    "skill": {
        "_creationTime": 1773883153860,
        "_id": "kd79pgd37a5yckkrbzv9rp29cn836mth",
        "badges": [],
        "createdAt": 1773883153860,
        "displayName": "Chanjing Text To Digital Person",
        "latestVersionId": "k97djkjthfb7sx709zvzn08ac583qmd3",
        "ownerPublisherId": "s17dzfw0aahqzz6dr91bzpma4h83gh5n",
        "ownerUserId": "kn7eezc93vqy58g3xkkwm9jr1x8366f3",
        "slug": "chanjing-text-to-digital-person",
        "stats": {
            "comments": 0,
            "downloads": 119,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 7
        },
        "summary": "Use Chanjing text-to-digital-person APIs for AI portraits, talking videos, optional LoRA training, polling, and explicit downloads when requested.",
        "tags": {
            "latest": "k97djkjthfb7sx709zvzn08ac583qmd3"
        },
        "updatedAt": 1774608409979
    }
}