59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill claims to be a shell-intercepting approval layer but is instruction-only with no implementation or install spec; it asks you to run npm install and to add a tool that doesn't exist, and it r...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770104161958,
        "_id": "k975vp4x6859sd76w96efb74yd80e6yy",
        "changelog": "Initial release of ClawShell: a human-in-the-loop security layer for shell commands.\n\n- Intercepts shell commands, analyzes risk, and requires push notification approval for high-risk actions.\n- Blocks critical commands automatically; allows medium\/low-risk commands based on configurable rules.\n- Provides tools for secure shell command execution (`clawshell_bash`), status checks, and log retrieval.\n- Supports Pushover and Telegram for approval notifications.\n- All command decisions and approvals are logged for audit and debugging.\n- Highly configurable via environment variables and `config.yaml`, with support for custom risk rules.",
        "changelogSource": "auto",
        "createdAt": 1770104161958,
        "parsed": {
            "clawdis": {
                "primaryEnv": "CLAWSHELL_PUSHOVER_USER",
                "requires": {
                    "bins": [
                        "node"
                    ],
                    "env": [
                        "CLAWSHELL_PUSHOVER_USER",
                        "CLAWSHELL_PUSHOVER_TOKEN"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Jed",
        "handle": "polucas",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/28898890?v=4",
        "kind": "user",
        "linkedUserId": "kn76kwcnatbk449tv51dhjsadh80fvw9"
    },
    "ownerHandle": "polucas",
    "skill": {
        "_creationTime": 1770104161958,
        "_id": "kd78nd16stsdb5vapfmpb823fn80epw8",
        "badges": [],
        "createdAt": 1770104161958,
        "displayName": "Clawshell",
        "latestVersionId": "k975vp4x6859sd76w96efb74yd80e6yy",
        "ownerUserId": "kn76kwcnatbk449tv51dhjsadh80fvw9",
        "slug": "clawshell",
        "stats": {
            "comments": 1,
            "downloads": 2535,
            "installsAllTime": 25,
            "installsCurrent": 23,
            "stars": 7,
            "versions": 1
        },
        "summary": "Human-in-the-loop security layer. Intercepts high-risk commands and requires push notification approval.",
        "tags": {
            "latest": "k975vp4x6859sd76w96efb74yd80e6yy"
        },
        "updatedAt": 1772249012173
    }
}