47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill does what it says (send mail via smtp.yeah.net using a python script) but it embeds live SMTP credentials directly in the SKILL.md — a surprising and risky design choice that could lead to c...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774189576731,
        "_id": "k97480h75yq41ed1w1p4wh40wh83d52e",
        "changelog": "- Major update: Replaced previous multi-provider, feature-rich email skill with documentation for a minimal, Python stdlib-based standalone mail script targeting smtp.yeah.net.\n- All code and config files removed; skill is now \"documentation only\" and instructs the agent to write\/run a standalone `\/tmp\/send_email.py` per invocation.\n- SMTP account fixed to validates@yeah.net with embedded client authorization code.\n- No dependency on local bash wrappers, external mail tools, or pip packages.\n- Emphasized non-interactive, stdlib-only approach to avoid TTY and automation issues.",
        "changelogSource": "user",
        "createdAt": 1774189576731,
        "parsed": {
            "clawdis": {
                "emoji": "📧",
                "requires": {
                    "bins": [
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "WGY2e",
        "handle": "wgy2e",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/45496880?v=4",
        "kind": "user",
        "linkedUserId": "kn7788c2acyc3fvrxhf30rzfqx83d6jk"
    },
    "ownerHandle": "wgy2e",
    "skill": {
        "_creationTime": 1774189576731,
        "_id": "kd74762ypb1xahk5h5ry083b0h83c1nv",
        "badges": [],
        "createdAt": 1774189576731,
        "displayName": "email-skill",
        "latestVersionId": "k97480h75yq41ed1w1p4wh40wh83d52e",
        "ownerUserId": "kn7788c2acyc3fvrxhf30rzfqx83d6jk",
        "slug": "email-tool-skill",
        "stats": {
            "comments": 0,
            "downloads": 28,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Send mail with Python stdlib smtplib (SMTP_SSL to smtp.yeah.net:465). Documented account validates@yeah.net with embedded client auth code; standalone script...",
        "tags": {
            "latest": "k97480h75yq41ed1w1p4wh40wh83d52e"
        },
        "updatedAt": 1774191407362
    }
}