65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill is a local wrapper for a Codex MCP server and mostly does what it says, but the package metadata omits required local binaries, the source is unknown, and the tool can read/modify arbitrary ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773039018431,
        "_id": "k97ccfyp2e6ra8zt94t7s5k6zn82jw0v",
        "changelog": "Initial release of codex-mcp-dev skill.\n\n- Enables real coding work in the current project through the local Codex CLI, mcporter, and codex-mcp-server.\n- Supports building features, fixing bugs, refactoring, debugging, test writing\/updating, and code review tasks.\n- Includes detailed workflow, setup instructions, and command patterns for various coding scenarios.\n- Provides prompting guidelines and guardrails to ensure safe, targeted use.\n- Designed to automate non-trivial development tasks with workspace-local Codex integration.",
        "changelogSource": "user",
        "createdAt": 1773039018431,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "qiucen",
        "handle": "hollywood3",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/74386260?v=4",
        "kind": "user",
        "linkedUserId": "kn7fh7q4c82wqhad8fv9z5dhqx82byr3"
    },
    "ownerHandle": "hollywood3",
    "skill": {
        "_creationTime": 1773039018431,
        "_id": "kd76r89d8v3t0zfze799m0cevs82k3tp",
        "badges": [],
        "createdAt": 1773039018431,
        "displayName": "codex-mcp-dev",
        "latestVersionId": "k97ccfyp2e6ra8zt94t7s5k6zn82jw0v",
        "ownerUserId": "kn7fh7q4c82wqhad8fv9z5dhqx82byr3",
        "slug": "codex-mcp-dev",
        "stats": {
            "comments": 0,
            "downloads": 191,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Use the local Codex CLI through mcporter and codex-mcp-server for real coding work in the current project. Use when the user asks to build features, fix bugs...",
        "tags": {
            "latest": "k97ccfyp2e6ra8zt94t7s5k6zn82jw0v"
        },
        "updatedAt": 1774330787901
    }
}