55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill is internally consistent with a CNB/OpenAPI wrapper, but its runtime instructions and bundled hooks attempt to force automatic curl execution (without asking the user) and contain prompt-inj...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773212349626,
        "_id": "k971khz1stf6q4rvt2n5vdcyw982qdbq",
        "changelog": "- Updated and expanded skill documentation for CNB-OpenAPI, providing a comprehensive overview and usage guidelines.\n- Added strict usage rules: all API calls must be executed via curl with authorization headers, always using environment variables for tokens and endpoints.\n- Documented URL parsing logic for extracting parameters when users provide CNB page links.\n- Included a detailed index of all available API services and endpoints, each with brief descriptions and links to further references.\n- Clarified requirements for environment variables and required tools for operation.",
        "changelogSource": "user",
        "createdAt": 1773212349626,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "curl"
                    ],
                    "env": [
                        "CNB_TOKEN"
                    ]
                }
            }
        },
        "version": "1.18.9"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "sixther-dc",
        "handle": "sixther-dc",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10322318?v=4",
        "kind": "user",
        "linkedUserId": "kn72dfgr01yj82hm1gnstve1a582k4p6"
    },
    "ownerHandle": "sixther-dc",
    "skill": {
        "_creationTime": 1773128331396,
        "_id": "kd70jer610czfzgkr5jvk49a0n82mxdc",
        "badges": [],
        "createdAt": 1773128331396,
        "displayName": "CNB OpenAPI Skills",
        "latestVersionId": "k971khz1stf6q4rvt2n5vdcyw982qdbq",
        "ownerUserId": "kn72dfgr01yj82hm1gnstve1a582k4p6",
        "slug": "cnb-openapi",
        "stats": {
            "comments": 0,
            "downloads": 190,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "与 CNB (Cloud Native Build) Open API 交互，用于代码管理和开发协作。当用户需要查询项目、代码仓库、问题、合并请求或其他开发相关数据时使用。需要 CNB_TOKEN 环境变量进行身份认证。API 请求地址从环境变量 CNB_API_ENDPOINT 获取，默认为 https:\/\/a...",
        "tags": {
            "latest": "k971khz1stf6q4rvt2n5vdcyw982qdbq"
        },
        "updatedAt": 1774331268551
    }
}