41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's behavior matches its description, but the implementation has several inconsistencies and a real command-injection risk (it can execute parts of the provided command locally before sending ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772617336022,
        "_id": "k972qvyhs3h5ajvhbpxk74ks5x8291xn",
        "changelog": "Initial release of claw-shell:\n\n- Runs shell commands exclusively inside a dedicated tmux session named \"claw\".\n- Captures and returns output from commands run in the session.\n- Ensures safety by restricting dangerous commands (e.g., sudo, rm, reboot) unless explicit user confirmation is received.\n- Provides a clear interface for running commands and handling approval for risky actions.",
        "changelogSource": "auto",
        "createdAt": 1772617336022,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "shiny",
        "handle": "zlshiny",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/4814669?v=4",
        "kind": "user",
        "linkedUserId": "kn7f5mchg1z4kqz3ht37sykbms820mr3"
    },
    "ownerHandle": "zlshiny",
    "skill": {
        "_creationTime": 1772617336022,
        "_id": "kd73t43jv84sf761r80apj0g2h829k56",
        "badges": [],
        "canonicalSkillId": "kd71t8nr121ncb14df1cxkdm0980bs12",
        "createdAt": 1772617336022,
        "displayName": "Claw Shell 1.0.0",
        "forkOf": {
            "at": 1772617336022,
            "kind": "duplicate",
            "skillId": "kd75rnsayfe4a42atj0r5428zh818gyw"
        },
        "latestVersionId": "k972qvyhs3h5ajvhbpxk74ks5x8291xn",
        "ownerUserId": "kn7f5mchg1z4kqz3ht37sykbms820mr3",
        "slug": "claw-shell-1-0-0",
        "stats": {
            "comments": 0,
            "downloads": 330,
            "installsAllTime": 10,
            "installsCurrent": 10,
            "stars": 0,
            "versions": 1
        },
        "summary": "Runs shell commands exclusively inside tmux session 'claw', captures output, and requests confirmation for potentially destructive commands.",
        "tags": {
            "latest": "k972qvyhs3h5ajvhbpxk74ks5x8291xn"
        },
        "updatedAt": 1774329074392
    }
}