59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement the claimed Crisp API functionality and only needs Crisp plugin credentials, but the registry metadata omits the required environment variables and there is a partial/tr...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769662464974,
        "_id": "k977gp39gg3vdmxgpadwbqhwpd8045gw",
        "changelog": "Initial release – integrates Crisp customer support API.\n\n- Supports checking inbox, reading\/searching conversations, sending and marking replies, and resolving conversations.\n- Requires authentication via environment variables for website ID and plugin token.\n- Includes example CLI workflows and key API endpoint documentation.\n- Security notes: credentials are stored via environment variables and never logged.\n- Recommends confirmation before sending replies and provides usage best practices.",
        "changelogSource": "user",
        "createdAt": 1769662464974,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Minh Phan (Paul)",
        "handle": "paul-phan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/11459809?v=4",
        "kind": "user",
        "linkedUserId": "kn7fk2e6gmd9rrt1tb6rsmsk4n801e74"
    },
    "ownerHandle": "paul-phan",
    "skill": {
        "_creationTime": 1769662464974,
        "_id": "kd70xyd3we7k0wb72zh4xptjs980578j",
        "badges": [],
        "createdAt": 1769662464974,
        "displayName": "Crisp Skill",
        "latestVersionId": "k977gp39gg3vdmxgpadwbqhwpd8045gw",
        "ownerUserId": "kn7fk2e6gmd9rrt1tb6rsmsk4n801e74",
        "slug": "crisp",
        "stats": {
            "comments": 0,
            "downloads": 1720,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Customer support via Crisp API. Use when the user asks to check, read, search, or respond to Crisp inbox messages. Requires Crisp website ID and plugin token (authenticated via environment variables CRISP_WEBSITE_ID, CRISP_TOKEN_ID, and CRISP_TOKEN_KEY).",
        "tags": {
            "latest": "k977gp39gg3vdmxgpadwbqhwpd8045gw"
        },
        "updatedAt": 1772161975998
    }
}