59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement legitimate DingTalk API operations, but the package/registry metadata does not declare the sensitive environment variables the scripts require and there is a packaging/i...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771838004442,
        "_id": "k971vx48b4yss770typdfp6hn581phj3",
        "changelog": "新增 OA 审批 API 功能，支持查询审批记录、发起\/撤销审批、执行任务、转交任务、添加评论等操作",
        "changelogSource": "user",
        "createdAt": 1771838004442,
        "version": "1.4.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ogenes",
        "handle": "ogenes",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/76425503?v=4",
        "kind": "user",
        "linkedUserId": "kn7757f1xmbttny40nh5znhtfx81msgc"
    },
    "ownerHandle": "ogenes",
    "skill": {
        "_creationTime": 1771740782397,
        "_id": "kd70aa3128y05e9fmwe69gqktx81nk74",
        "badges": [],
        "createdAt": 1771740782397,
        "displayName": "DingTalk API",
        "latestVersionId": "k971vx48b4yss770typdfp6hn581phj3",
        "ownerUserId": "kn7757f1xmbttny40nh5znhtfx81msgc",
        "slug": "dingtalk-api",
        "stats": {
            "comments": 0,
            "downloads": 2480,
            "installsAllTime": 26,
            "installsCurrent": 24,
            "stars": 8,
            "versions": 11
        },
        "summary": "调用钉钉开放平台API，支持用户搜索\/详情\/查询、部门管理（搜索\/详情\/子部门\/用户列表\/父部门）、机器人单聊消息发送、群聊消息发送、群内机器人列表查询、离职记录查询。Use when needing to search DingTalk users or departments, get user\/depart...",
        "tags": {
            "latest": "k971vx48b4yss770typdfp6hn581phj3"
        },
        "updatedAt": 1773477480685
    }
}