47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

功能和代码总体与“CMS Skill 创建/发布”描述一致, 但存在几处不一致与安全风险（未声明所需凭据、会自动建议用 npx 安装外部依赖、脚本禁用 SSL 验证），安装前应审慎评估与限制凭据。

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774687024900,
        "_id": "k97czcx7hmdkavvsztm6hw335583sv37",
        "changelog": "cms-create-skill v1.0.8\n\n- 优化了鉴权依赖的实现方式，统一按 `cms-auth-skills\/SKILL.md` 声明及读取鉴权规则\n- 明确区分 token 与鉴权值（appKey、access-token）的场景与用法\n- 工作流和核心原则描述保持一致，但“鉴权规则”与“依赖查找”方式更清晰\n- 仅文档（SKILL.md）变更，无代码和接口调整",
        "changelogSource": "user",
        "createdAt": 1774687024900,
        "version": "1.0.8"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s174w40rh23bjb4hmnxn9p1fa983gsch",
        "displayName": "spzwin",
        "handle": "spzwin",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/48741773?v=4",
        "kind": "user",
        "linkedUserId": "kn75s45s478x9t53qv91jrmb7h8208xm"
    },
    "ownerHandle": "spzwin",
    "skill": {
        "_creationTime": 1774667361506,
        "_id": "kd76fyyy3sxmmevyn58v00zhzh83styk",
        "badges": [],
        "createdAt": 1774667361506,
        "displayName": "cms-create-skill",
        "latestVersionId": "k97czcx7hmdkavvsztm6hw335583sv37",
        "ownerPublisherId": "s174w40rh23bjb4hmnxn9p1fa983gsch",
        "ownerUserId": "kn75s45s478x9t53qv91jrmb7h8208xm",
        "slug": "cms-create-skill",
        "stats": {
            "comments": 0,
            "downloads": 25,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "CMS Skill 创建工具 — 三位一体的 Skill 全生命周期工具：发现平台已有 Skill、按 XGJK 协议创建新 Skill、发布\/更新\/下架 Skill",
        "tags": {
            "latest": "k97czcx7hmdkavvsztm6hw335583sv37"
        },
        "updatedAt": 1774687314894
    }
}