59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill broadly matches an auditor's purpose, but its runtime instructions and bundled scripts include prompt-injection patterns, a writable API URL override, and workflow steps that could be abused...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770026428681,
        "_id": "k97dj6cqqzgs08f0cjw7xd37ax80c16b",
        "changelog": "Major overhaul: LLM-based audits, peer review, provenance chains, anti-collusion, AI-specific detection patterns",
        "changelogSource": "user",
        "createdAt": 1770026428681,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "bash",
                        "jq",
                        "curl"
                    ]
                }
            }
        },
        "version": "2.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "starbuck100",
        "handle": "starbuck100",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/25417736?v=4",
        "kind": "user",
        "linkedUserId": "kn71zdt4ta2c1cpp0248de79g180a9va"
    },
    "ownerHandle": "starbuck100",
    "skill": {
        "_creationTime": 1769956815558,
        "_id": "kd79c9bk3hes5kp2w6zbbhnpfd80amgs",
        "badges": [],
        "createdAt": 1769956815558,
        "displayName": "ecap Security Auditor",
        "latestVersionId": "k97dj6cqqzgs08f0cjw7xd37ax80c16b",
        "ownerUserId": "kn71zdt4ta2c1cpp0248de79g180a9va",
        "slug": "ecap-security-auditor",
        "stats": {
            "comments": 0,
            "downloads": 2228,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 2
        },
        "summary": "Security audit framework for AI agent skills, MCP servers, and packages. Your LLM does the analysis — we provide structure, prompts, and a shared trust database.",
        "tags": {
            "latest": "k97dj6cqqzgs08f0cjw7xd37ax80c16b"
        },
        "updatedAt": 1772248630489
    }
}