37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code matches its stated purpose (ZenTao CLI) but the runtime instructions ask you to put plaintext credentials into a local TOOLS.md (and even include concrete example credentials), which ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774345678167,
        "_id": "k977jgvck9n5k3aajznkshceex83gn7v",
        "changelog": "- Added CLI entry point (cli.js) for command-line usage.\n- Updated documentation to reflect new CLI commands and usage examples.\n- Refined package metadata for CLI support.\n- No changes to core API functionality.",
        "changelogSource": "auto",
        "createdAt": 1774345678167,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17b861whvwm1xvep7kzrysfb183gt0r",
        "displayName": "15334615152",
        "handle": "15334615152",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/33169920?v=4",
        "kind": "user",
        "linkedUserId": "kn7302v0x6qt8h6g96mbqc5ygn82qw1e"
    },
    "ownerHandle": "15334615152",
    "skill": {
        "_creationTime": 1774345328288,
        "_id": "kd7epkyqbkdszrp4g677vh3ejs83gmn2",
        "badges": [],
        "createdAt": 1774345328288,
        "displayName": "Cym Zentao",
        "latestVersionId": "k977jgvck9n5k3aajznkshceex83gn7v",
        "ownerPublisherId": "s17b861whvwm1xvep7kzrysfb183gt0r",
        "ownerUserId": "kn7302v0x6qt8h6g96mbqc5ygn82qw1e",
        "slug": "cym-zentao",
        "stats": {
            "comments": 0,
            "downloads": 16,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "Manage Zentao project iterations and tasks including login, listing executions, creating and listing tasks with filters and details.",
        "tags": {
            "latest": "k977jgvck9n5k3aajznkshceex83gn7v"
        },
        "updatedAt": 1774348012126
    }
}