65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill legitimately implements DingTalk contact queries, but its metadata omits the credentials it actually requires and the bundled helper will persist secrets to disk and execute shell scripts—th...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773391517566,
        "_id": "k97c2m0zgt6qjs08avtkanfzbx82vg3h",
        "changelog": "- Initial release of dingtalk-contact skill.\n- Supports comprehensive DingTalk contact and address book queries, including user and department search, user info, department members, organizational structure, and statistics.\n- Implements robust config management via scripts for AppKey\/AppSecret and user identification, with secure credential handling.\n- Includes detailed workflow and decision logic for all address book operations.\n- Provides sample bash script templates and API extraction commands for further integration and referencing.",
        "changelogSource": "auto",
        "createdAt": 1773391517566,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "breath57",
        "handle": "breath57",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/48155693?v=4",
        "kind": "user",
        "linkedUserId": "kn7ajfvbjw0grwe1w57ytnd5j582re1w"
    },
    "ownerHandle": "breath57",
    "skill": {
        "_creationTime": 1773391517566,
        "_id": "kd7bk34eebf7zwmtya5j20zjt182vxtr",
        "badges": [],
        "createdAt": 1773391517566,
        "displayName": "Dingtalk Contact",
        "latestVersionId": "k97c2m0zgt6qjs08avtkanfzbx82vg3h",
        "ownerUserId": "kn7ajfvbjw0grwe1w57ytnd5j582re1w",
        "slug": "dingtalk-contact",
        "stats": {
            "comments": 0,
            "downloads": 147,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "钉钉通讯录与联系人查询。当用户提到\"钉钉通讯录\"、\"查找员工\"、\"搜索用户\"、\"查用户信息\"、\"获取用户详情\"、\"用户手机号\"、\"员工姓名\"、\"员工工号\"、\"查部门\"、\"搜索部门\"、\"部门成员\"、\"部门列表\"、\"部门详情\"、\"子部门\"、\"父部门\"、\"部门路径\"、\"员工总数\"、\"通讯录搜索\"、\"userId 转 u...",
        "tags": {
            "latest": "k97c2m0zgt6qjs08avtkanfzbx82vg3h"
        },
        "updatedAt": 1774332956672
    }
}