37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's stated purpose (scouting GitHub users) matches its behavior, but there are several inconsistencies and privacy/exfiltration risks you should review before installing.

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774547497975,
        "_id": "k973rp7q0nm0jf2bejx5dajj8183neps",
        "changelog": "Major update: improved security, credential handling, and documentation.\n\n- Renamed skill to \"chinese-talent-scout\"; updated metadata and entrypoint.\n- Added explicit safety, credential, and security guidance in documentation.\n- Introduced dedicated security and credential reference files.\n- Switched commands to be driven through a shell script, improving compatibility.\n- Removed README, test, build, and pipeline scripts for a simpler, leaner package.",
        "changelogSource": "auto",
        "createdAt": 1774547497975,
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17556rr90bd9g7dhwhpv2yq4583m9nf",
        "displayName": "Huan Du",
        "handle": "huandu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/239739?v=4",
        "kind": "user",
        "linkedUserId": "kn7egghzaapqchex3yg3nmeqq182sg7g"
    },
    "ownerHandle": "huandu",
    "skill": {
        "_creationTime": 1774542929595,
        "_id": "kd7eprn0yr4hcq2cbnfjayeqmn83nwt3",
        "badges": [],
        "createdAt": 1774542929595,
        "displayName": "Chinese Talent Scout",
        "latestVersionId": "k973rp7q0nm0jf2bejx5dajj8183neps",
        "ownerPublisherId": "s17556rr90bd9g7dhwhpv2yq4583m9nf",
        "ownerUserId": "kn7egghzaapqchex3yg3nmeqq182sg7g",
        "slug": "chinese-talent-scout",
        "stats": {
            "comments": 0,
            "downloads": 44,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Discover, score, and monitor Chinese GitHub developers with GitHub signals, rule-based processing, optional OpenClaw AI evaluation, shortlist queries, cron m...",
        "tags": {
            "latest": "k973rp7q0nm0jf2bejx5dajj8183neps"
        },
        "updatedAt": 1774551725525
    }
}