41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The code and documentation largely match a DingTalk integration, but multiple metadata, packaging, and distribution inconsistencies (plus a bundled virtualenv and a detected prompt-injection pattern i...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772077508517,
        "_id": "k976j33b3veztyw3jkyv5v3ypn81x3kj",
        "changelog": "- Initial release of dingtalk-api skill, offering complete DingTalk Open Platform integration.\n- Supports user and department management, including search, detail queries, and hierarchy operations.\n- Provides both traditional API call and Stream mode event push with multi-session isolation.\n- Enables bot messaging in single and group chats, plus group bot list queries.\n- Includes approval (OA) process management features for enterprise internal apps.\n- Offers detailed environment configuration guidance and best practice recommendations.",
        "changelogSource": "auto",
        "createdAt": 1772077508517,
        "version": "0.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Zao_hon",
        "handle": "zaohon",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/17217613?v=4",
        "kind": "user",
        "linkedUserId": "kn73ngf0s02mcqawszh8pgzcmh8140sg"
    },
    "ownerHandle": "zaohon",
    "skill": {
        "_creationTime": 1772077508517,
        "_id": "kd734s0fnwq2n1dzqb7fr79v2581wd3c",
        "badges": [],
        "createdAt": 1772077508517,
        "displayName": "Dingtalk Api",
        "latestVersionId": "k976j33b3veztyw3jkyv5v3ypn81x3kj",
        "ownerUserId": "kn73ngf0s02mcqawszh8pgzcmh8140sg",
        "slug": "dingtalk-bot",
        "stats": {
            "comments": 0,
            "downloads": 6614,
            "installsAllTime": 2,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 1
        },
        "summary": "调用钉钉开放平台API，支持用户搜索\/详情\/查询、部门管理（搜索\/详情\/子部门\/用户列表\/父部门）、机器人单聊消息发送、群聊消息发送、群内机器人列表查询、Stream模式事件推送、多会话隔离管理等核心功能。Use when needing to search DingTalk users or departmen...",
        "tags": {
            "latest": "k976j33b3veztyw3jkyv5v3ypn81x3kj"
        },
        "updatedAt": 1774327200425
    }
}