41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill is coherent with its stated purpose (a wrapper for the ClawdHub CLI) but its instructions allow fetching, installing, and publishing third‑party code which can exfiltrate or execute local fi...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769653063911,
        "_id": "k974a1wvasfyrz51s5ct17xfmx8055mh",
        "changelog": "- Initial release of the ClawdHub CLI skill.\n- Search, install, update, list, and publish agent skills from clawdhub.com directly via CLI commands.\n- Supports syncing installed skills to latest or specific versions.\n- Integrates publish workflow with authentication using clawdhub login.\n- Registry and working directory can be customized with environment variables or flags.",
        "changelogSource": "auto",
        "createdAt": 1769653063911,
        "parsed": {
            "clawdis": {
                "install": [
                    {
                        "bins": [
                            "clawdhub"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install ClawdHub CLI (npm)",
                        "package": "clawdhub"
                    }
                ],
                "requires": {
                    "bins": [
                        "clawdhub"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jk50505k",
        "handle": "jk50505k",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/38711478?v=4",
        "kind": "user",
        "linkedUserId": "kn7axpn23jqp7z32p7htwnszk1802rpe"
    },
    "ownerHandle": "jk50505k",
    "skill": {
        "_creationTime": 1769653063911,
        "_id": "kd7b5dd8jemcsb4sgrdzty89x18057q9",
        "badges": [],
        "createdAt": 1769653063911,
        "displayName": "Clawdhub Copy",
        "latestVersionId": "k974a1wvasfyrz51s5ct17xfmx8055mh",
        "ownerUserId": "kn7axpn23jqp7z32p7htwnszk1802rpe",
        "slug": "clawdhub-copy",
        "stats": {
            "comments": 0,
            "downloads": 1636,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 0,
            "versions": 1
        },
        "summary": "Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new\/updated skill folders with the npm-installed clawdhub CLI.",
        "tags": {
            "latest": "k974a1wvasfyrz51s5ct17xfmx8055mh"
        },
        "updatedAt": 1774321717623
    }
}