41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill matches its stated purpose (querying an on-prem RAGFlow knowledge API) but contains hard-coded credentials, internal IP addresses, and path assumptions that are disproportionate and risky.

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770789762715,
        "_id": "k97av7advrcpfh7cehzxeggwbn80ywdh",
        "changelog": "- Initial release of the RAGFlow知识库问答Skill for intelligent Q&A and operational guidance using the RAGFlow Knowledge Base API.\n- Supports technical Q&A, fault diagnosis, and operational instructions for scenarios such as container\/Docker issues and system administration.\n- Utilizes streaming responses with user feedback and detailed timeout settings for optimal experience (5-10s typical, up to 60s max).\n- Provides summarized answers with actionable suggestions and references from knowledge sources.\n- Includes step-by-step usage instructions, debug mode support, and troubleshooting guides for API connectivity and authentication issues.\n- Highlights best practices for summarizing results, offering executable commands, and maintaining session context.",
        "changelogSource": "user",
        "createdAt": 1770789762715,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "chenkun-nuaa",
        "handle": "chenkun-nuaa",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/50040804?v=4",
        "kind": "user",
        "linkedUserId": "kn79ma3fmj8nh12wgqrr8nf99x80yvte"
    },
    "ownerHandle": "chenkun-nuaa",
    "skill": {
        "_creationTime": 1770789762715,
        "_id": "kd73xmmbygy0f8h7vcbqs145cd80zffh",
        "badges": [],
        "createdAt": 1770789762715,
        "displayName": "ck-rag-skill",
        "latestVersionId": "k97av7advrcpfh7cehzxeggwbn80ywdh",
        "ownerUserId": "kn79ma3fmj8nh12wgqrr8nf99x80yvte",
        "slug": "ck-rag-skill",
        "stats": {
            "comments": 0,
            "downloads": 852,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "RAGFlow知识库问答与操作指导。调用RAGFlow知识库API进行智能问答，并基于知识库返回结果提供agent操作建议。支持流式输出，耐心等待完整响应生成。当用户提出技术问题、故障排查、操作指导或需要知识库检索时触发此技能。适用于容器\/Docker问题、系统运维、开发相关问题等场景。",
        "tags": {
            "latest": "k97av7advrcpfh7cehzxeggwbn80ywdh"
        },
        "updatedAt": 1774324063058
    }
}