65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it says (manage todos in PostgreSQL) but its registry metadata omits required database credentials and the code reaches outside its own directory (looking for reporting scri...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774656226034,
        "_id": "k972c98vpnshn8cs0924thq8zx83r5qp",
        "changelog": "ClawList 1.2.2\n\n- Added explicit documentation of required environment variables for PostgreSQL connection in SKILL.md.\n- Clarified cross-agent access: all data is visible across agents sharing a database (no isolation).\n- Docs now warn that the `migrate --action import-delete` command will permanently delete source files after importing.\n- Minor improvements to documentation for database access logging.",
        "changelogSource": "auto",
        "createdAt": 1774656226034,
        "version": "1.2.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17dy3k1dp0atdq0m33h4hrhkd83p2vj",
        "displayName": "Morten Bojer",
        "handle": "mbojer",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8454000?v=4",
        "kind": "user",
        "linkedUserId": "kn74x87hshbavsc4313x3d4smh8318ta"
    },
    "ownerHandle": "mbojer",
    "skill": {
        "_creationTime": 1773777010647,
        "_id": "kd78a11xwkd4rtyqxapnc8p6th8329f1",
        "badges": [],
        "createdAt": 1773777010647,
        "displayName": "ClawList — Todo Skill",
        "latestVersionId": "k972c98vpnshn8cs0924thq8zx83r5qp",
        "ownerPublisherId": "s17dy3k1dp0atdq0m33h4hrhkd83p2vj",
        "ownerUserId": "kn74x87hshbavsc4313x3d4smh8318ta",
        "slug": "claw-list",
        "stats": {
            "comments": 0,
            "downloads": 115,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 5
        },
        "summary": "Manage todo lists in PostgreSQL. Per-agent lists, optional categories, priorities, due dates. Triggers: \"todo\", \"add task\", \"mark done\", \"what's due\", \"my ta...",
        "tags": {
            "latest": "k972c98vpnshn8cs0924thq8zx83r5qp"
        },
        "updatedAt": 1774769134734
    }
}