46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The included wrappers are benign and consistent with the description, but the skill delegates all sensitive work to an externally installed npm package (installed globally) whose behaviour and telemet...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774237900858,
        "_id": "k9782taj643b3t4by7vd58k0rh83f183",
        "changelog": "Republished under canonflip-git; portable CLI scripts",
        "changelogSource": "user",
        "createdAt": 1774237900858,
        "version": "0.1.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "canonflip-git",
        "handle": "canonflip-git",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/265405415?v=4",
        "kind": "user",
        "linkedUserId": "kn78vww7dffnda8agajjrg0xgh82fw6j"
    },
    "ownerHandle": "canonflip-git",
    "skill": {
        "_creationTime": 1774235944357,
        "_id": "kd7a1evrhe59jaz7zm2z5bhpfn83ep63",
        "badges": [],
        "createdAt": 1774235944357,
        "displayName": "CloakClaw",
        "latestVersionId": "k9782taj643b3t4by7vd58k0rh83f183",
        "ownerUserId": "kn78vww7dffnda8agajjrg0xgh82fw6j",
        "slug": "cloakclaw",
        "stats": {
            "comments": 0,
            "downloads": 21,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Automatic privacy proxy for AI conversations. Redacts sensitive data (names, companies, financials, SSNs, emails, phones, addresses, API keys, IPs, passwords...",
        "tags": {
            "latest": "k9782taj643b3t4by7vd58k0rh83f183"
        },
        "updatedAt": 1774237973131
    }
}