47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

Tool mostly does what it says (rotate .env secrets and emit Vault CLI commands), but the implementation persistently stores plaintext rotated secrets (history file in the user home) and the SKILL.md/b...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773410469884,
        "_id": "k97dxyz340tw8hx59ex1z8zqmn82v28b",
        "changelog": "Initial release of env-secrets-rotator.\n\n- Rotate secrets in .env files with random value generation (hex, base64, uuid, alphanumeric)\n- Backup original files before modification\n- Preview changes using dry-run mode\n- Generate HashiCorp Vault CLI commands for rotated secrets\n- Batch process multiple keys\/files and validate .env files\n- Optional rotation history tracking",
        "changelogSource": "auto",
        "createdAt": 1773410469884,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Derick",
        "handle": "derick001",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/114499711?v=4",
        "kind": "user",
        "linkedUserId": "kn7948wwr0qpf4bjbdvvyq02xx81sqza"
    },
    "ownerHandle": "derick001",
    "skill": {
        "_creationTime": 1773410469884,
        "_id": "kd77gvaerr3z099rrjn7bxseax82t4hr",
        "badges": [],
        "createdAt": 1773410469884,
        "displayName": "Environment Secrets Rotator",
        "latestVersionId": "k97dxyz340tw8hx59ex1z8zqmn82v28b",
        "ownerUserId": "kn7948wwr0qpf4bjbdvvyq02xx81sqza",
        "slug": "env-secrets-rotator",
        "stats": {
            "comments": 0,
            "downloads": 111,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Rotate and update secrets in environment files, generate Vault commands, and manage secret rotation workflows.",
        "tags": {
            "latest": "k97dxyz340tw8hx59ex1z8zqmn82v28b"
        },
        "updatedAt": 1774333155275
    }
}