41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (consolidate credentials) matches most of its code, but several design choices and enforcement behaviors are disproportionate or internally inconsistent and could cause data...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770436388201,
        "_id": "k971dmtsjmh8m5avxbnn07zy3180q46w",
        "changelog": "Consolidation Rule enforcement - all credentials MUST be in ~\/.openclaw\/.env ONLY. Enhanced detection for workspace\/skills\/scripts .env files. New CONSOLIDATION-RULE.md documentation.",
        "changelogSource": "user",
        "createdAt": 1770436388201,
        "version": "1.3.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Mr. TeeClaw",
        "handle": "callmedas69",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/126429597?v=4",
        "kind": "user",
        "linkedUserId": "kn7e4bzbghfte58b0a3htxfq6580caja"
    },
    "ownerHandle": "callmedas69",
    "skill": {
        "_creationTime": 1770299849985,
        "_id": "kd73thq8ynvkf25xsmfpccac4580k1ev",
        "badges": [],
        "createdAt": 1770299849985,
        "displayName": "Credential Manager",
        "latestVersionId": "k971dmtsjmh8m5avxbnn07zy3180q46w",
        "ownerUserId": "kn7e4bzbghfte58b0a3htxfq6580caja",
        "slug": "credential-manager",
        "stats": {
            "comments": 0,
            "downloads": 2858,
            "installsAllTime": 35,
            "installsCurrent": 33,
            "stars": 2,
            "versions": 4
        },
        "summary": "MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Use when setting up OpenClaw, migrating credentials, auditing security, or enforcing the .env standard. This is not optional — centralized credential management is a core requirement for secure OpenClaw deployments. Scans for credential files across common locations, backs up existing files, creates a unified .env with mode 600, validates security, and enforces best practices.",
        "tags": {
            "latest": "k971dmtsjmh8m5avxbnn07zy3180q46w"
        },
        "updatedAt": 1774322794072
    }
}