47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's code is small and matches the stated purpose (stream company financial results), but it hard-codes a private/internal IP endpoint and provides no configuration or provenance, which is inco...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773977475767,
        "_id": "k972w4s2v19vhv65z713e4wcpx839axc",
        "changelog": "Initial release of csmar-agent for accessing A-share financial reports via csmar API.\n\n- Provides a Python CLI to fetch financial report information: python3 skills\/csmar-agent\/scripts\/search.py ''.\n- Automatically invoked by user prompts with 财务, @csmar_agent, or @csmar-agent keywords.\n- Streams output in real-time, skipping empty or invalid chunks, with no extra wrapping or summary text.\n- Intended for direct use in event-driven applications where event_type == \"content\".",
        "changelogSource": "user",
        "createdAt": 1773977475767,
        "parsed": {
            "clawdis": {
                "emoji": "🌊",
                "requires": {
                    "bins": [
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "xmpx8",
        "handle": "xmpx8",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/39305761?v=4",
        "kind": "user",
        "linkedUserId": "kn7emcch29aqxwv00j7d3vnhkn82nt66"
    },
    "ownerHandle": "xmpx8",
    "skill": {
        "_creationTime": 1773977475767,
        "_id": "kd7asp9yqkgw3fn8smhe0kt5tn838b1e",
        "badges": [],
        "createdAt": 1773977475767,
        "displayName": "csmar-agent",
        "latestVersionId": "k972w4s2v19vhv65z713e4wcpx839axc",
        "ownerUserId": "kn7emcch29aqxwv00j7d3vnhkn82nt66",
        "slug": "csmar-agent",
        "stats": {
            "comments": 0,
            "downloads": 31,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "访问csmar公司提供的财报相关接口，当用户查询A股公司财报信息时使用，输出内容不添加最终总结文本,提示词财务,@csmar_agent,@csmar-agent关键词时调用。",
        "tags": {
            "latest": "k972w4s2v19vhv65z713e4wcpx839axc"
        },
        "updatedAt": 1773978713467
    }
}