41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match its described purpose (managing skills via a CLI) but provenance is missing and the runtime steps let the agent fetch and install arbitrary code from external registries...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1767545308330,
        "_id": "k971z0hmgg09ezb8svtkv18e9x7yknzs",
        "changelog": "",
        "createdAt": 1767545308330,
        "parsed": {
            "clawdis": {
                "install": [
                    {
                        "bins": [
                            "clawdhub"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install ClawdHub CLI (npm)",
                        "package": "clawdhub"
                    }
                ],
                "requires": {
                    "bins": [
                        "clawdhub"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Peter Steinberger",
        "handle": "steipete",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/58493?v=4",
        "kind": "user",
        "linkedUserId": "kn70pywhg0fyz996kpa8xj89s57yhv26"
    },
    "ownerHandle": "steipete",
    "skill": {
        "_creationTime": 1767545308330,
        "_id": "kd79qg7e6gtpc140s549bk0x2s7yjrh9",
        "badges": [],
        "createdAt": 1767545308330,
        "displayName": "Clawdhub",
        "latestVersionId": "k971z0hmgg09ezb8svtkv18e9x7yknzs",
        "ownerUserId": "kn70pywhg0fyz996kpa8xj89s57yhv26",
        "slug": "clawdhub",
        "stats": {
            "comments": 1,
            "downloads": 24064,
            "installsAllTime": 368,
            "installsCurrent": 340,
            "stars": 203,
            "versions": 1
        },
        "summary": "Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new\/updated skill folders with the npm-installed clawdhub CLI.",
        "tags": {
            "latest": "k971z0hmgg09ezb8svtkv18e9x7yknzs"
        },
        "updatedAt": 1774321207284
    }
}