94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill's declared purpose (an async OAuth handoff using a CLI and local keychain storage) matches what it asks the agent to do and the only external artifact it requires is the clawauth CLI; review...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771240841149,
        "_id": "k973yzkaq89teyr698qk44m82n819gps",
        "changelog": "**Major update: Skill rebranded and refactored to \"clawauth\" with new OAuth handover flow and async-first pattern.**\n\n- Skill renamed from \"Auth\" to \"clawauth\", with new focus and description.\n- New OAuth architecture: agents request short OAuth links for end users, claim tokens asynchronously, and store securely in local system keychain—no centralized SaaS vault.\n- Detailed CLI usage instructions, runtime requirements, and supported providers documented.\n- Expanded metadata\/frontmatter for operator-controlled install flows; exposed Node-based install path.\n- Security and agent handling guidelines formalized (token boundary, error handling, keychain storage).\n- Added reference file: `references\/commands.md` for command-line examples.",
        "changelogSource": "user",
        "createdAt": 1771240841149,
        "parsed": {
            "clawdis": {
                "emoji": "🔐",
                "homepage": "https:\/\/auth.clawauth.app",
                "install": [
                    {
                        "bins": [
                            "clawauth"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install clawauth CLI (node)",
                        "package": "clawauth"
                    }
                ],
                "requires": {
                    "bins": [
                        "clawauth"
                    ]
                }
            }
        },
        "version": "1.0.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Hagen Hoferichter",
        "handle": "h4gen",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/12556763?v=4",
        "kind": "user",
        "linkedUserId": "kn7ft2sr98d9c21957t1hvb5fs811eyd"
    },
    "ownerHandle": "h4gen",
    "skill": {
        "_creationTime": 1771175083959,
        "_id": "kd7f05v8gce1ffhfnj8xxtayh5816j82",
        "badges": [],
        "createdAt": 1771175083959,
        "displayName": "User-Delegated OAuth API Access",
        "latestVersionId": "k973yzkaq89teyr698qk44m82n819gps",
        "ownerUserId": "kn7ft2sr98d9c21957t1hvb5fs811eyd",
        "slug": "clawauth",
        "stats": {
            "comments": 0,
            "downloads": 527,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 7
        },
        "summary": "Let agents request OAuth access from end users via short links, continue working asynchronously, and later claim reusable third-party API tokens from local k...",
        "tags": {
            "latest": "k973yzkaq89teyr698qk44m82n819gps"
        },
        "updatedAt": 1772036735897
    }
}