59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill mostly performs a plausible local security scan, but there are several inconsistencies (missing referenced scripts, undeclared runtime dependencies, hard-coded user paths, and unimplemented ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770839468211,
        "_id": "k970800p5n2a6qp9wb25agz5m980yrcf",
        "changelog": "ClawShield 1.1.0 — OpenClaw's Always‑On Security Cop\n\n🚨 **12% of ClawHub skills are malicious.** ClawShield catches prompt‑injection, API leaks, and hidden threats *before* they hit.\n\n**What it does:**\n✅ Scans every line for PI patterns + tool abuse\n✅ Finds exposed API keys (Downloads\/Desktop)\n✅ Monitors new files + ports\n✅ Plain‑English logs (no JSON)\n\n**Easy UI panel:**\n🔍 SCAN NOW button\n⚙️ Settings (daily\/weekly scans, sensitivity)\n⏰ Cron auto‑setup\n🔔 Alerts (Telegram\/Email)\n\n**Cheat code for cheap models:**\nHigh‑risk LLMs need this. Logs everything while you're away.\n\n**Local‑only, privacy‑safe.** Frenzy‑proof your Claw.\n\nContact: Jeffrey Coleman | smallbizailab79@gmail.com\n\nTags: security, pi-detector, audit, frenzy-proof, api-leak, agent-guard, Security, Pi, Audit, Malicious Software Security, Hacker Protection, Prompt Injection protection, API security, Skill Safety, Vuln Check, frenzy-proof, clawhub safe, malware-scan, agent-guard",
        "changelogSource": "user",
        "createdAt": 1770839468211,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Poolguy24",
        "handle": "poolguy24",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/136844663?v=4",
        "kind": "user",
        "linkedUserId": "kn7cwkcenfx943hwpvzw2rhmf180zy5m"
    },
    "ownerHandle": "poolguy24",
    "skill": {
        "_creationTime": 1770839468211,
        "_id": "kd7ctgsjgcktedj1zg9hfxx6pd80zj5w",
        "badges": [],
        "createdAt": 1770839468211,
        "displayName": "ClawShield",
        "latestVersionId": "k970800p5n2a6qp9wb25agz5m980yrcf",
        "ownerUserId": "kn7cwkcenfx943hwpvzw2rhmf180zy5m",
        "slug": "clawshield",
        "stats": {
            "comments": 0,
            "downloads": 1057,
            "installsAllTime": 8,
            "installsCurrent": 7,
            "stars": 1,
            "versions": 1
        },
        "summary": "OpenClaw security audit + prompt injection detector. Scans gateway\/vulns\/cron\/PI patterns. Use for frenzy-proofing installs.",
        "tags": {
            "API security": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Audit": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Hacker Protection": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Malicious Software Security": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Pi": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Prompt Injection protection": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Security": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Skill Safety": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "Vuln Check": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "agent-guard": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "clawhub safe": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "frenzy-proof": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "latest": "k970800p5n2a6qp9wb25agz5m980yrcf",
            "malware-scan": "k970800p5n2a6qp9wb25agz5m980yrcf"
        },
        "updatedAt": 1772062544757
    }
}