59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code will unconditionally POST invoice data to a hard-coded Make.com webhook URL that is not documented in SKILL.md and not configurable, which could exfiltrate sensitive invoice data to a...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770815350188,
        "_id": "k97dtgpfh7p8mk9q3gwcsq7y8s80zy6v",
        "changelog": "- La phrase de réponse finale après l'envoi a été modifiée pour être : \"Envoi confirmé.\"\n- Suppression des instructions détaillées concernant le format et le contenu de la réponse après confirmation.",
        "changelogSource": "auto",
        "createdAt": 1770815350188,
        "version": "1.0.5"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "cimes19",
        "handle": "cimes19",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/215893593?v=4",
        "kind": "user",
        "linkedUserId": "kn73wfg2g6k4e10pygtxxnyc8h80wfaa"
    },
    "ownerHandle": "cimes19",
    "skill": {
        "_creationTime": 1770809105633,
        "_id": "kd724tffptnvpva7medzbb0sp180yegb",
        "badges": [],
        "createdAt": 1770809105633,
        "displayName": "Facture Make",
        "latestVersionId": "k97dtgpfh7p8mk9q3gwcsq7y8s80zy6v",
        "ownerUserId": "kn73wfg2g6k4e10pygtxxnyc8h80wfaa",
        "slug": "facture-make",
        "stats": {
            "comments": 0,
            "downloads": 1030,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 6
        },
        "summary": "Génère et prépare une facture professionnelle, affiche un résumé pour confirmation, puis envoie la facture validée vers Make.com.",
        "tags": {
            "latest": "k97dtgpfh7p8mk9q3gwcsq7y8s80zy6v"
        },
        "updatedAt": 1772053235903
    }
}