55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's claims (a ring‑0 security kernel that intercepts runtime behavior and enforces DLP) are not supported by the provided artifacts and include self-protecting language and installer instructi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773816637171,
        "_id": "k97dq7t8g5njfv6m9mjfw4xyed835cnq",
        "changelog": "**Major upgrade: ClawGuard evolves into ClawGuard Auditor (CG-A) with enterprise-grade security features.**\n\n- Introduces pre-flight static analysis, runtime capability enforcement, semantic intent analysis, and real-time data loss prevention (DLP).\n- Enforces immutable security axioms: cannot be disabled, zero-trust default, strict data sovereignty, and least privilege access.\n- Provides deep static (SAST) and behavioral code vetting before skill installation or execution; blocks risks by intent mismatch.\n- Runtime security kernel enforces capability tokens and immediate privilege revocation after use.\n- Features active DLP engine to redact secrets\/PII before network transmission; blocks data exfiltration attempts.\n- Comprehensive audit reporting includes provenance, semantic intent match, threat findings, capability mapping, DLP risks, and a clear risk verdict.",
        "changelogSource": "user",
        "createdAt": 1773816637171,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "stardreaming",
        "handle": "stardreaming",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/160408334?v=4",
        "kind": "user",
        "linkedUserId": "kn7fq6h0mc0nqbkzq8c79k1wjx834cz0"
    },
    "ownerHandle": "stardreaming",
    "skill": {
        "_creationTime": 1773816637171,
        "_id": "kd77a3m7gp08w2bzz93z8yt4yd834xyz",
        "badges": [],
        "createdAt": 1773816637171,
        "displayName": "ClawGuard",
        "latestVersionId": "k97dq7t8g5njfv6m9mjfw4xyed835cnq",
        "ownerUserId": "kn7fq6h0mc0nqbkzq8c79k1wjx834cz0",
        "slug": "clawguard-auditor",
        "stats": {
            "comments": 0,
            "downloads": 52,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Enterprise-grade Security Kernel, SAST Vetter, and Active DLP Engine for OpenClaw. Provides pre-flight static analysis, runtime capability enforcement, zero-...",
        "tags": {
            "latest": "k97dq7t8g5njfv6m9mjfw4xyed835cnq"
        },
        "updatedAt": 1774336931356
    }
}