41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement legitimate Clerk setup and troubleshooting, but there are mismatches and privilege signals you should review before installing (notably: it references and operates on se...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769871343181,
        "_id": "k974xjjd4xt1e499xxh3d7vsa5808zbh",
        "changelog": "- Initial public release with comprehensive guide for Clerk authentication.\n- Introduces API Keys beta (Dec 2025) supporting user\/org-scoped API keys, with CRUD UI component and backend verification patterns.\n- Details breaking changes for Next.js 16: new proxy.ts middleware filename (replacing middleware.ts) due to March 2025 CVE; Clerk v6.35.0+ required.\n- Covers API version 2025-11-10 breaking changes (Nov 2025) impacting billing endpoints, field terminology, and response structure.\n- Documents new features: force password reset, organization analytics filters, PKCE for custom OAuth, and automatic credential stuffing defense.\n- Includes updated error prevention, webhook verification, and best practices for production setups and middleware configuration.",
        "changelogSource": "auto",
        "createdAt": 1769871343181,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Veera",
        "handle": "veeramanikandanr48",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/119089869?v=4",
        "kind": "user",
        "linkedUserId": "kn7agf701n3afzzbq8ge0wa8k1809wm4"
    },
    "ownerHandle": "veeramanikandanr48",
    "skill": {
        "_creationTime": 1769871343181,
        "_id": "kd79gfr48fbdex2zh28vn2m85h809v4n",
        "badges": [],
        "createdAt": 1769871343181,
        "displayName": "Clerk Auth",
        "latestVersionId": "k974xjjd4xt1e499xxh3d7vsa5808zbh",
        "ownerUserId": "kn7agf701n3afzzbq8ge0wa8k1809wm4",
        "slug": "clerk-auth",
        "stats": {
            "comments": 0,
            "downloads": 1436,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP outages), and component reference. Prevents 15 documented errors. Use when: API keys for users\/orgs, Next.js 16 middleware filename, troubleshooting JWKS\/CSRF\/JWT\/token-type-mismatch errors, webhook verification, user type inconsistencies, or testing with 424242 OTP.",
        "tags": {
            "latest": "k974xjjd4xt1e499xxh3d7vsa5808zbh"
        },
        "updatedAt": 1774321899074
    }
}