47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (controlling cmus playback) matches the required binaries and general approach, but the runtime instructions contain risky, unnecessary shell behavior (notably use of `eval`...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774516186696,
        "_id": "k9797b1s878f46c3fa0bbem16583n90d",
        "changelog": "**Improved reliability and environment compatibility for cmus agent**\n\n- Adds robust environment variable injection (DISPLAY, XAUTHORITY, DBUS) to ensure X11 terminal launch in headless\/background environments.\n- Replaces fixed sleep with dynamic polling for the cmus socket to prevent race conditions.\n- Mandates resolving file paths using eval\/echo before playback for maximum compatibility.\n- Updates metadata to include \"pgrep\" as a required binary.\n- Documentation updated with new exact bash instructions and improved process explanations.",
        "changelogSource": "user",
        "createdAt": 1774516186696,
        "parsed": {
            "clawdis": {
                "emoji": "🎹",
                "requires": {
                    "bins": [
                        "cmus",
                        "cmus-remote",
                        "xfce4-terminal",
                        "pgrep"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s170d9p4ajrpy4d4t04zcjpv7983msxw",
        "displayName": "nhathuynguyen19",
        "handle": "nhathuynguyen19",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/124348443?v=4",
        "kind": "user",
        "linkedUserId": "kn703rwrj197g279d72mhbaqns83ms5j"
    },
    "ownerHandle": "nhathuynguyen19",
    "skill": {
        "_creationTime": 1774495280715,
        "_id": "kd74vtq5e0mfn1fnq1tfb9zstn83mcb7",
        "badges": [],
        "createdAt": 1774495280715,
        "displayName": "cmus Music Player",
        "latestVersionId": "k9797b1s878f46c3fa0bbem16583n90d",
        "ownerPublisherId": "s170d9p4ajrpy4d4t04zcjpv7983msxw",
        "ownerUserId": "kn703rwrj197g279d72mhbaqns83ms5j",
        "slug": "cmus",
        "stats": {
            "comments": 0,
            "downloads": 40,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "AI skill to launch cmus in a Xubuntu terminal and enforce playback rules (single track vs shuffle folder). Robust against high latency and headless daemon en...",
        "tags": {
            "latest": "k9797b1s878f46c3fa0bbem16583n90d"
        },
        "updatedAt": 1774517816136
    }
}