47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's behavior (collecting skill file hashes, listener metadata, and registering a local client then sending data to an external ClawScan service) matches its stated purpose, but there are incon...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773113610799,
        "_id": "k973jgaep7m9fa2cr2ehwk8ynx82nrra",
        "changelog": "Initial release of the ClawScan skill for OpenClaw security assessment.\n\n- Provides a suite of first-pass security checks: version vulnerability, installed skills hash, and port exposure detection.\n- Enables local client registration and periodic scheduled scans with results reported only if risk is detected.\n- Implements minimal, privacy-respecting data collection for each check.\n- Delivers clear, structured risk reports with actionable recommendations and explicit scope notes.\n- User-invocable for targeted checks or full scans; configurable schedule.",
        "changelogSource": "user",
        "createdAt": 1773113610799,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/github.com\/autosecdev\/clawscan-skills"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "fate93930",
        "handle": "fate93930",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7125025?v=4",
        "kind": "user",
        "linkedUserId": "kn749yfkaccyhrax2jnb98knmx82jnqx"
    },
    "ownerHandle": "fate93930",
    "skill": {
        "_creationTime": 1773113610799,
        "_id": "kd7avshmqr3n0fmvyj7ky3wk5182n92v",
        "badges": [],
        "createdAt": 1773113610799,
        "displayName": "clawscan",
        "latestVersionId": "k973jgaep7m9fa2cr2ehwk8ynx82nrra",
        "ownerUserId": "kn749yfkaccyhrax2jnb98knmx82jnqx",
        "slug": "clawscan-autosec-dev",
        "stats": {
            "comments": 0,
            "downloads": 157,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "perform first-pass security checks for openclaw deployments by registering the client, checking whether the installed clawscan package is outdated, checking...",
        "tags": {
            "latest": "k973jgaep7m9fa2cr2ehwk8ynx82nrra"
        },
        "updatedAt": 1774331182831
    }
}