50/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： unknown

OpenClaw： suspicious

The skill's functionality (financial research + monitoring) is plausible, but there are multiple metadata/instruction inconsistencies and past security findings (shared-env writes, cron modification) ...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772077396247,
        "_id": "k97e98hj5js82djjymawaa017x81wb5s",
        "changelog": "Cue v1.0.4 introduces a major codebase migration and architectural redesign.\n\n- Entire core codebase migrated from Bash scripts to Node.js for improved maintainability and scalability.\n- New `src\/` directory established, implementing main logic in JavaScript (e.g., `cli.js`, `core\/`, `api\/`).\n- All operational Bash scripts moved to `backups\/` for legacy reference; original `scripts\/` directory removed.\n- Extensive new documentation and test plans added (integration, migration, release, comparison docs).\n- Manifest and package files updated for new structure and Node.js dependencies.\n- No changes to user-facing commands or workflows; functionality remains consistent.",
        "changelogSource": "auto",
        "createdAt": 1772077396247,
        "version": "1.0.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "huhoo",
        "handle": "huhoo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/4213650?v=4",
        "kind": "user",
        "linkedUserId": "kn74g5r9j74ntmdmmd5m735f7n80t5b8"
    },
    "ownerHandle": "huhoo",
    "skill": {
        "_creationTime": 1771857974803,
        "_id": "kd75tajhvyp434rs7k4ve632s981q92q",
        "badges": [],
        "createdAt": 1771857974803,
        "displayName": "Cue",
        "latestVersionId": "k97e98hj5js82djjymawaa017x81wb5s",
        "ownerUserId": "kn74g5r9j74ntmdmmd5m735f7n80t5b8",
        "slug": "cue",
        "stats": {
            "comments": 0,
            "downloads": 495,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 5
        },
        "summary": "AI-powered financial research assistant with \"White-Box\" evidence engineering. Multi-Agent architecture for automated information collection, verification, a...",
        "tags": {
            "ai": "k9767nafa5rgc7ph26frzh71ph81pacs",
            "finance": "k9767nafa5rgc7ph26frzh71ph81pacs",
            "financial-analysis": "k9767nafa5rgc7ph26frzh71ph81pacs",
            "investment": "k9767nafa5rgc7ph26frzh71ph81pacs",
            "latest": "k97e98hj5js82djjymawaa017x81wb5s",
            "monitoring": "k9767nafa5rgc7ph26frzh71ph81pacs",
            "research": "k9767nafa5rgc7ph26frzh71ph81pacs"
        },
        "updatedAt": 1772245911573
    }
}