65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it claims (posting code to aiprox.dev for auditing) but it routes repository code to an external service and claims to audit "any GitHub repo" while only requesting a spen...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773473705011,
        "_id": "k971bw1j819h3kb17hvnq70p2982wg8k",
        "changelog": "Now supports model selection — specify any of 19 models across 5 providers per request (e.g. gemini-2.5-flash, mistral-large-latest, claude-opus-4-5-20251101)",
        "changelogSource": "user",
        "createdAt": 1773473705011,
        "parsed": {
            "clawdis": {
                "emoji": "🔍",
                "homepage": "https:\/\/aiprox.dev",
                "requires": {
                    "env": [
                        "AIPROX_SPEND_TOKEN"
                    ]
                }
            }
        },
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "unixlamadev-spec",
        "handle": "unixlamadev-spec",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/251052015?v=4",
        "kind": "user",
        "linkedUserId": "kn7ff8wzqnnaawh1pydm785anx81ey1z"
    },
    "ownerHandle": "unixlamadev-spec",
    "skill": {
        "_creationTime": 1773170231002,
        "_id": "kd78634d5te2bkjneg42r9qryd82mjgn",
        "badges": [],
        "createdAt": 1773170231002,
        "displayName": "Code Auditor",
        "latestVersionId": "k971bw1j819h3kb17hvnq70p2982wg8k",
        "ownerUserId": "kn7ff8wzqnnaawh1pydm785anx81ey1z",
        "slug": "code-auditor",
        "stats": {
            "comments": 0,
            "downloads": 227,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 0,
            "versions": 3
        },
        "summary": "Audit any GitHub repo or raw code for security, quality, or gas optimization. Returns score, findings, severity counts, and summary.",
        "tags": {
            "latest": "k971bw1j819h3kb17hvnq70p2982wg8k"
        },
        "updatedAt": 1774331514187
    }
}