59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's content matches a Discord Bot API guide, but it asks for sensitive credentials (bot token, app ID, public key) in its runtime instructions while the manifest lists no required credentials ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770265376283,
        "_id": "k97awehrgk5zfqnbw59563n4ds80knpx",
        "changelog": "Initial release of discord-hub skill.\n\n- Provides a production-oriented guide for creating Discord bot workflows via the REST API and Interactions.\n- Focuses on advanced command UX, security best practices, and HTTP request usage without libraries.\n- Includes reference documents for API surfaces, authentication, commands, interactions, and rate limits.\n- Lists required inputs and outlines expected outputs for effective bot operation.\n- Emphasizes safe operation, quick responses, and strong security practices.",
        "changelogSource": "user",
        "createdAt": 1770265376283,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "codedao12",
        "handle": "codedao12",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/249323427?v=4",
        "kind": "user",
        "linkedUserId": "kn7ehv4at8yekzag31spcarxm180bev0"
    },
    "ownerHandle": "codedao12",
    "skill": {
        "_creationTime": 1770264899849,
        "_id": "kd7e2sdtavybrsy2p8baxc3mm180kctw",
        "badges": [],
        "createdAt": 1770264899849,
        "displayName": "Discord",
        "latestVersionId": "k97awehrgk5zfqnbw59563n4ds80knpx",
        "ownerUserId": "kn7ehv4at8yekzag31spcarxm180bev0",
        "slug": "discord-hub",
        "stats": {
            "comments": 0,
            "downloads": 2477,
            "installsAllTime": 16,
            "installsCurrent": 16,
            "stars": 2,
            "versions": 2
        },
        "summary": "OpenClaw skill for Discord Bot API workflows, covering interactions, commands, messages, and operations using direct HTTPS requests.",
        "tags": {
            "latest": "k97awehrgk5zfqnbw59563n4ds80knpx"
        },
        "updatedAt": 1772249377768
    }
}