47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill appears to implement the claimed payroll-import functionality, but it embeds a hardcoded payment API key, calls an external billing endpoint, and depends on external/uninstalled helper scrip...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774407914927,
        "_id": "k9740sm1hssa1ptf5wwby7243h83j10g",
        "changelog": "接入SkillPay完整计费：SKILL_ID已配置，charge接口对接完成",
        "changelogSource": "user",
        "createdAt": 1774407914927,
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17bn6068w1enskxy8393kgbax83jhkc",
        "displayName": "loverun321",
        "handle": "loverun321",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/222489895?v=4",
        "kind": "user",
        "linkedUserId": "kn7ftmj84wj2dka6fgbh48a0as82bnz4"
    },
    "ownerHandle": "loverun321",
    "skill": {
        "_creationTime": 1774404033576,
        "_id": "kd770g4n9txna3974y8zmrz3ph83kxdq",
        "badges": [],
        "createdAt": 1774404033576,
        "displayName": "Cmb Salary Import",
        "latestVersionId": "k9740sm1hssa1ptf5wwby7243h83j10g",
        "ownerPublisherId": "s17bn6068w1enskxy8393kgbax83jhkc",
        "ownerUserId": "kn7ftmj84wj2dka6fgbh48a0as82bnz4",
        "slug": "cmb-salary-import",
        "stats": {
            "comments": 0,
            "downloads": 0,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "招商银行工资批量导入工具。当用户提到\"招行工资导入\"、\"工资表导入银行模板\"、\"AgencyPayment\"、\"批量代发\"、\"工资文件导入银行\"时触发。功能：将工资表（工资.xlsx）中的税后实发金额、姓名、银行卡号、开户行等信息，不改格式地填入银行代发模板（AgencyPayment.xlsx）。支持：读取任意...",
        "tags": {
            "latest": "k9740sm1hssa1ptf5wwby7243h83j10g"
        },
        "updatedAt": 1774408015822
    }
}