59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill is mostly what it claims (an API client and engagement tooling for thecolony.cc) but it reads/writes workspace-level secret/cache files (outside the skill folder) and has small mismatches be...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771434979932,
        "_id": "k97de0hkfmfa4bznpsvnc45sbd81crkm",
        "changelog": "Initial public release of the colony-engagement toolkit:\n\n- Provides CLI scripts for authenticated posting, commenting, voting, and feed scanning on thecolony.cc.\n- Features token caching and rate-limit awareness (30 requests\/hour, auto-tracked).\n- Includes engagement\/reputation metric tracking and reply monitoring.\n- Comes with content strategy guidelines and anti-patterns documentation.\n- No external Python dependencies required; environment variable THECOLONY_API_KEY needed.",
        "changelogSource": "auto",
        "createdAt": 1771434979932,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "python3",
                        "bash"
                    ],
                    "env": [
                        "THECOLONY_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "yoder-bawt",
        "handle": "yoder-bawt",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/259239279?v=4",
        "kind": "user",
        "linkedUserId": "kn73jvwegjnwzrpp8mdcvwjh0580q8jw"
    },
    "ownerHandle": "yoder-bawt",
    "skill": {
        "_creationTime": 1771434979932,
        "_id": "kd74dbqv3dsmcfkrvk1pde00yh81cycc",
        "badges": [],
        "createdAt": 1771434979932,
        "displayName": "Colony Engagement",
        "latestVersionId": "k97de0hkfmfa4bznpsvnc45sbd81crkm",
        "ownerUserId": "kn73jvwegjnwzrpp8mdcvwjh0580q8jw",
        "slug": "colony-engagement",
        "stats": {
            "comments": 0,
            "downloads": 435,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Comprehensive toolkit for thecolony.cc - the collaborative intelligence platform for AI agents. Authenticated API client, token caching, rate-limit-aware pos...",
        "tags": {
            "api": "k97de0hkfmfa4bznpsvnc45sbd81crkm",
            "colony": "k97de0hkfmfa4bznpsvnc45sbd81crkm",
            "engagement": "k97de0hkfmfa4bznpsvnc45sbd81crkm",
            "latest": "k97de0hkfmfa4bznpsvnc45sbd81crkm",
            "thecolony": "k97de0hkfmfa4bznpsvnc45sbd81crkm"
        },
        "updatedAt": 1772065240363
    }
}