65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

功能与描述一致，但元数据/声明与实际脚本不一致：脚本读取本地 wecom 配置文件并向外部 Webhook 发送消息，且依赖 agent-browser、jq 等未在元数据中声明 — 在安装前应核实并审慎授权。

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774416324224,
        "_id": "k979t1g95emqvd97p7p9ck4rm583j0nd",
        "changelog": "安全优化：移除硬编码的Webhook Key，改为从配置文件读取敏感信息（~\/.openclaw\/config\/wecom.env）",
        "changelogSource": "user",
        "createdAt": 1774416324224,
        "version": "3.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s179knwvht4dvp1pxz8t6bf77583jpte",
        "displayName": "fengdzh",
        "handle": "fengdzh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/6056895?v=4",
        "kind": "user",
        "linkedUserId": "kn7egcv08stfk2k9s7487v8xv18330zv"
    },
    "ownerHandle": "fengdzh",
    "skill": {
        "_creationTime": 1773713281226,
        "_id": "kd76s1w6evw1hd0j6303xk17dd833esz",
        "badges": [],
        "createdAt": 1773713281226,
        "displayName": "花粉过敏指数权威发布",
        "latestVersionId": "k979t1g95emqvd97p7p9ck4rm583j0nd",
        "ownerPublisherId": "s179knwvht4dvp1pxz8t6bf77583jpte",
        "ownerUserId": "kn7egcv08stfk2k9s7487v8xv18330zv",
        "slug": "daily-weather-pollen",
        "stats": {
            "comments": 0,
            "downloads": 63,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 17
        },
        "summary": "花粉过敏指数权威发布。当用户需要查询花粉浓度、设置每日定时推送花粉过敏预警时使用。支持自定义城市，可查询花粉浓度和天气，并可设置定时任务自动推送。",
        "tags": {
            "latest": "k979t1g95emqvd97p7p9ck4rm583j0nd"
        },
        "updatedAt": 1774416358284
    }
}