46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The skill fetches Douyin videos but by default forwards the user's API key and Cookie to an external host (xueai.szzy.top) not disclosed in the SKILL.md or registry metadata — this is a risky mismatch...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774593242200,
        "_id": "k972pfxb78t9mhphpjpfb5zn4n83qbfn",
        "changelog": "Initial release of douyin-user-videos skill:\n\n- Enables retrieval of Douyin user video lists by profile URL.\n- Returns video description and publish time for each video.\n- Requires configuration of user-specific API key and Douyin login cookie via environment variables.\n- Includes detailed error handling for invalid URLs, API keys, cookies, and insufficient balance.\n- Adds tool: douyin_get_user_videos for programmatic video list access.",
        "changelogSource": "user",
        "createdAt": 1774593242200,
        "parsed": {
            "clawdis": {
                "author": "xueai-portal"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175nkyw0e23v9epaq68mckf7583ptn9",
        "displayName": "tanshiyang",
        "handle": "tanshiyang",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/2681340?v=4",
        "kind": "user",
        "linkedUserId": "kn7cwydsysdm3we0ksmjew0fgn83qtwk"
    },
    "ownerHandle": "tanshiyang",
    "skill": {
        "_creationTime": 1774593242200,
        "_id": "kd7dsy67zke57v0x2jcpk1w1qd83p710",
        "badges": [],
        "createdAt": 1774593242200,
        "displayName": "获取抖音博主主页视频列表",
        "latestVersionId": "k972pfxb78t9mhphpjpfb5zn4n83qbfn",
        "ownerPublisherId": "s175nkyw0e23v9epaq68mckf7583ptn9",
        "ownerUserId": "kn7cwydsysdm3we0ksmjew0fgn83qtwk",
        "slug": "douyin-user-videos",
        "stats": {
            "comments": 0,
            "downloads": 31,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "获取抖音博主的视频列表",
        "tags": {
            "latest": "k972pfxb78t9mhphpjpfb5zn4n83qbfn"
        },
        "updatedAt": 1774593262742
    }
}