59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement a legitimate Coda API CLI, but the package metadata does not declare the required CODA_API_TOKEN credential (and other small inconsistencies), so the bundle is internall...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770583874306,
        "_id": "k972grt7knps844n82refhv3yd80rkdd",
        "changelog": "Initial release: Complete Coda REST API v1 integration. Supports doc management (list, get, create, delete), tables, rows (CRUD), and pages. Features safety confirmations for destructive operations and JSON\/Table\/CSV output formats.",
        "changelogSource": "user",
        "createdAt": 1770583874306,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "TFM",
        "handle": "0x7466",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7838269?v=4",
        "kind": "user",
        "linkedUserId": "kn77r3fj15mm6jvp9854cmyzqd80sfvz"
    },
    "ownerHandle": "0x7466",
    "skill": {
        "_creationTime": 1770583874306,
        "_id": "kd7ftp8mgjda7xbce07dkanndh80swwc",
        "badges": [],
        "createdAt": 1770583874306,
        "displayName": "Coda",
        "latestVersionId": "k972grt7knps844n82refhv3yd80rkdd",
        "ownerUserId": "kn77r3fj15mm6jvp9854cmyzqd80sfvz",
        "slug": "coda",
        "stats": {
            "comments": 0,
            "downloads": 1417,
            "installsAllTime": 6,
            "installsCurrent": 6,
            "stars": 1,
            "versions": 1
        },
        "summary": "General-purpose Coda document manager via REST API v1. Supports listing\/creating\/updating\/deleting docs, managing tables\/rows\/pages, triggering automations, and exploring doc structure. Requires CODA_API_TOKEN environment variable. Delete operations require explicit confirmation; publishing and permission changes require explicit user intent.",
        "tags": {
            "latest": "k972grt7knps844n82refhv3yd80rkdd"
        },
        "updatedAt": 1772336387696
    }
}