59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions largely match its stated purpose (querying an external Clawdex API), but it instructs reading local skill directories and sending skill names to an external host while not dec...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769966383139,
        "_id": "k978fq1rahprs8h6wv8gd8nkfx80azmq",
        "changelog": "- Updated skill name and description to reference \"Koi\" instead of \"Koi Security.\"\n- Changed \"About Koi Security\" section title to \"About Koi\" and updated the description, mentioning that Clawdex verdicts are powered by Wings, the agentic AI risk engine.\n- Minor rewording throughout documentation for consistency and clarity.",
        "changelogSource": "auto",
        "createdAt": 1769966383139,
        "parsed": {
            "clawdis": {
                "emoji": "🛡️"
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "wearekoi",
        "handle": "wearekoi",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/245664760?v=4",
        "kind": "user",
        "linkedUserId": "kn749knp6w41q3970ks75jeh8h80aq5z"
    },
    "ownerHandle": "wearekoi",
    "skill": {
        "_creationTime": 1769963734144,
        "_id": "kd7av03jk6h8cbt8pszk3wrygd80a3yh",
        "badges": [],
        "createdAt": 1769963734144,
        "displayName": "Clawdex by Koi",
        "latestVersionId": "k978fq1rahprs8h6wv8gd8nkfx80azmq",
        "ownerUserId": "kn749knp6w41q3970ks75jeh8h80aq5z",
        "slug": "clawdex",
        "stats": {
            "comments": 0,
            "downloads": 5924,
            "installsAllTime": 56,
            "installsCurrent": 55,
            "stars": 6,
            "versions": 3
        },
        "summary": "Security check for ClawHub skills powered by Koi. Query the Clawdex API before installing any skill to verify it's safe.",
        "tags": {
            "latest": "k978fq1rahprs8h6wv8gd8nkfx80azmq"
        },
        "updatedAt": 1772248655055
    }
}