65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's behavior (read an API key from DOUYIN_TRANSCRIBE_API_KEY and POST to https://coze-js-api.devtool.uk/transcribe-douyin) matches its stated purpose, but registry metadata omits the required ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773390687110,
        "_id": "k9729r781dcz3kg2rmf29z888s82vj68",
        "changelog": "**Now uses an external shell script for transcription requests.**\n\n- Added scripts\/transcribe_douyin.sh for handling API requests via bash.\n- Updated logic to execute the bundled shell script instead of building API requests inline.\n- Response formatting and error prompts remain consistent, but requests use exec bash scripts\/transcribe_douyin.sh with environment-based API key.\n- Added metadata to declare system requirements (bash, curl, python3).\n- Clarified examples and instructions to prefer the shell wrapper over manual curl commands.",
        "changelogSource": "user",
        "createdAt": 1773390687110,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "bash",
                        "curl",
                        "python3"
                    ]
                }
            }
        },
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "kyriswu",
        "handle": "kyriswu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5120703?v=4",
        "kind": "user",
        "linkedUserId": "kn7f82k3gnhe2et6rj37b1rsfn81qq01"
    },
    "ownerHandle": "kyriswu",
    "skill": {
        "_creationTime": 1773389157324,
        "_id": "kd70q9b3jas8ngqk3cwnb9c97x82t4qm",
        "badges": [],
        "createdAt": 1773389157324,
        "displayName": "抖音文案解析",
        "latestVersionId": "k9729r781dcz3kg2rmf29z888s82vj68",
        "ownerUserId": "kn7f82k3gnhe2et6rj37b1rsfn81qq01",
        "slug": "douyin-transcribe-api",
        "stats": {
            "comments": 0,
            "downloads": 134,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Call the coze-js-api Douyin transcription endpoint and return transcript-ready results from Douyin URLs or share-text. Use this skill whenever the user asks...",
        "tags": {
            "latest": "k9729r781dcz3kg2rmf29z888s82vj68"
        },
        "updatedAt": 1774332940816
    }
}