41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill is functionally coherent (it will send Gmail via another skill) but it instructs the agent to immediately send user-provided content to hard-coded addresses without confirmation, which risks...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770829055199,
        "_id": "k9751f6tz348hgh3ak4rd993sn80z4nf",
        "changelog": "Initial release: Automatically sends emails via Gmail when user messages start with \"cma\" or \"cmap\".\n\n- Detects \"cma\" or \"cmap\" prefixes to route emails to specific recipients.\n- Parses subject and body using the \"|\" character, or generates a default subject from message content.\n- Integrates with the `gog` skill for Gmail sending.\n- Confirms email delivery to the user with recipient and subject details.",
        "changelogSource": "auto",
        "createdAt": 1770829055199,
        "parsed": {
            "clawdis": {
                "emoji": "📧"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "mtbf999",
        "handle": "mtbf999",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/203152504?v=4",
        "kind": "user",
        "linkedUserId": "kn7dtmggnfdgw8qqvwej3db3ks80y2bd"
    },
    "ownerHandle": "mtbf999",
    "skill": {
        "_creationTime": 1770829055199,
        "_id": "kd7amwpt2cc63m6a1gpmt43kf580zsk9",
        "badges": [],
        "createdAt": 1770829055199,
        "displayName": "CMA Email",
        "latestVersionId": "k9751f6tz348hgh3ak4rd993sn80z4nf",
        "ownerUserId": "kn7dtmggnfdgw8qqvwej3db3ks80y2bd",
        "slug": "cma-email",
        "stats": {
            "comments": 0,
            "downloads": 762,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Sends an email via Gmail when a message starts with \"cma\" or \"cmap\".",
        "tags": {
            "latest": "k9751f6tz348hgh3ak4rd993sn80z4nf"
        },
        "updatedAt": 1774324155055
    }
}