65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's code and instructions match its stated purpose (sending DingTalk messages via uxc), but the package metadata does not declare the credentials and environment access the runtime docs clearl...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773617056994,
        "_id": "k976fx1vfpjrmw6pz2srxfs93d82yats",
        "changelog": "- Initial release of the DingTalk messaging skill for UXC.\n- Provides request\/response IM operations: one-to-one bot sends, group bot sends, service group sends, and minimal user lookup.\n- Uses curated OpenAPI schema and DingTalk v1 API (`api.dingtalk.com\/v1.0`) exclusively.\n- App-token bearer authentication managed via `uxc auth bootstrap` or manual access token fallback.\n- Includes guardrails for write operations and clear guidance for setup and execution.\n- Excludes approval, admin, webhook, and subscribe\/stream event flows.",
        "changelogSource": "auto",
        "createdAt": 1773617056994,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jolestar",
        "handle": "jolestar",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/77268?v=4",
        "kind": "user",
        "linkedUserId": "kn76v1w3vse2yfx3k4dkkbn9bd81xemv"
    },
    "ownerHandle": "jolestar",
    "skill": {
        "_creationTime": 1773617056994,
        "_id": "kd797pj5tyk7j422nrhj4mbg1x82y99a",
        "badges": [],
        "createdAt": 1773617056994,
        "displayName": "DingTalk OpenAPI Skill",
        "latestVersionId": "k976fx1vfpjrmw6pz2srxfs93d82yats",
        "ownerUserId": "kn76v1w3vse2yfx3k4dkkbn9bd81xemv",
        "slug": "dingtalk-openapi-skill",
        "stats": {
            "comments": 0,
            "downloads": 100,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Operate DingTalk messaging APIs through UXC with a curated OpenAPI schema, app-token bearer auth, and robot\/service-group guardrails.",
        "tags": {
            "latest": "k976fx1vfpjrmw6pz2srxfs93d82yats"
        },
        "updatedAt": 1774334595684
    }
}