41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill largely does what it claims (calls Context7 APIs), but it embeds a default API key in source and fails to declare or document required credentials — a surprising and risky mismatch.

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1768676358349,
        "_id": "k977j3tt8e8k1caz0tczf2b45s7zdn37",
        "changelog": "Initial release - Python-based Context7 API client for fetching up-to-date library documentation with search and context commands",
        "changelogSource": "user",
        "createdAt": 1768676358349,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "am-will",
        "handle": "am-will",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/42459108?v=4",
        "kind": "user",
        "linkedUserId": "kn71yaeagtfnne2ae9s6q82h2n7z65f9"
    },
    "ownerHandle": "am-will",
    "skill": {
        "_creationTime": 1768676358349,
        "_id": "kd792pnhsnppk5c1rt6wgtx2b97zc1bq",
        "badges": [],
        "createdAt": 1768676358349,
        "displayName": "Context7 API Documentation Fetcher",
        "latestVersionId": "k977j3tt8e8k1caz0tczf2b45s7zdn37",
        "ownerUserId": "kn71yaeagtfnne2ae9s6q82h2n7z65f9",
        "slug": "context7-api",
        "stats": {
            "comments": 0,
            "downloads": 1941,
            "installsAllTime": 7,
            "installsCurrent": 7,
            "stars": 0,
            "versions": 1
        },
        "summary": "Fetch up-to-date library documentation via Context7 API. Use PROACTIVELY when:\n(1) Working with ANY external library (React, Next.js, Supabase, etc.)\n(2) User asks about library APIs, patterns, or best practices\n(3) Implementing features that rely on third-party packages\n(4) Debugging library-specific issues\n(5) Need current documentation beyond training data cutoff\nAlways prefer this over guessing library APIs or using outdated knowledge.",
        "tags": {
            "latest": "k977j3tt8e8k1caz0tczf2b45s7zdn37"
        },
        "updatedAt": 1774321337149
    }
}