56/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： clean

OpenClaw： suspicious

The skill's instructions generally match a pay-per-query gateway, but it recommends running a remote installer (curl | bash) for a CLI and does not declare the CLI as a required dependency — that mism...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773938849895,
        "_id": "k974797gs3c4wbh13xm0capd098361ar",
        "changelog": "codex-gateway 1.0.0\n\n- Initial release enables pay-per-query access to the Codex Supergraph via MPP 402 challenge flow.\n- Supports GraphQL queries only; mutations and subscriptions are not available through this skill.\n- No API key required—payment credentials are handled per request.\n- Consult provided query templates and reference guides before constructing queries.\n- Includes documentation on endpoints, headers, authentication flow, and usage constraints.",
        "changelogSource": "user",
        "createdAt": 1773938849895,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Neal O'Grady",
        "handle": "nealo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/3241395?v=4",
        "kind": "user",
        "linkedUserId": "kn769tjgaf5fqnwjg3wpb800k18378vp"
    },
    "ownerHandle": "nealo",
    "skill": {
        "_creationTime": 1773938849895,
        "_id": "kd7a9vseqyt4m241wts69g9e9x837bd6",
        "badges": [],
        "createdAt": 1773938849895,
        "displayName": "Codex Agentic Gateway",
        "latestVersionId": "k974797gs3c4wbh13xm0capd098361ar",
        "ownerUserId": "kn769tjgaf5fqnwjg3wpb800k18378vp",
        "slug": "codex-gateway",
        "stats": {
            "comments": 0,
            "downloads": 33,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Use when the user wants to query the Codex Supergraph and the server returns a 402 challenge. Pays per query via the MPP 402 challenge flow. Only supports qu...",
        "tags": {
            "latest": "k974797gs3c4wbh13xm0capd098361ar"
        },
        "updatedAt": 1773938875554
    }
}