41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (a read-only self-audit) mostly matches its checks, but there are clear internal inconsistencies (claims read-only yet documents --fix remediation and chmod commands, metada...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769469026784,
        "_id": "k97d7zvcyg3grszn3m1jtfz6mh7zzvah",
        "changelog": "Added Trust Hierarchy, Prompt Injection Mitigation, Sandboxing levels, Browser Control Risks, Incident Response, Secret Scanning, Vulnerability Reporting. 13 domains.",
        "changelogSource": "user",
        "createdAt": 1769469026784,
        "parsed": {
            "clawdis": {
                "emoji": "🔒",
                "os": [
                    "darwin",
                    "linux"
                ]
            }
        },
        "version": "2.2.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Seth Rose",
        "handle": "thesethrose",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10383809?v=4",
        "kind": "user",
        "linkedUserId": "kn72ce44tqw8bnnnewrn1s5x3s7yz7sq"
    },
    "ownerHandle": "thesethrose",
    "skill": {
        "_creationTime": 1769463345220,
        "_id": "kd78bym4ks1ef3a5dpm8bc1yb17zzcv7",
        "badges": [],
        "createdAt": 1769463345220,
        "displayName": "Clawdbot Security Check",
        "latestVersionId": "k97d7zvcyg3grszn3m1jtfz6mh7zzvah",
        "ownerUserId": "kn72ce44tqw8bnnnewrn1s5x3s7yz7sq",
        "slug": "clawdbot-security-check",
        "stats": {
            "comments": 19,
            "downloads": 7387,
            "installsAllTime": 67,
            "installsCurrent": 63,
            "stars": 33,
            "versions": 5
        },
        "summary": "Perform a comprehensive read-only security audit of Clawdbot's own configuration. This is a knowledge-based skill that teaches Clawdbot to identify hardening opportunities across the system. Use when user asks to \"run security check\", \"audit clawdbot\", \"check security hardening\", or \"what vulnerabilities does my Clawdbot have\". This skill uses Clawdbot's internal capabilities and file system access to inspect configuration, detect misconfigurations, and recommend remediations. It is designed to be extensible - new checks can be added by updating this skill's knowledge.",
        "tags": {
            "latest": "k97d7zvcyg3grszn3m1jtfz6mh7zzvah"
        },
        "updatedAt": 1774321561307
    }
}