41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's functionality (pulling news and pushing to IM via webhooks) matches its declared requirements, but it directs the agent to fetch and run third‑party code from GitHub and has small inconsis...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771990372805,
        "_id": "k974p7aqdzpn6dbbkrtnx7d6rn81v74r",
        "changelog": "- No file changes detected in this version.\n- No user-facing updates or modifications.\n- Behavior and documentation remain unchanged.",
        "changelogSource": "user",
        "createdAt": 1771990372805,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "HOT_PUSH_FEISHU_WEBHOOK",
                        "HOT_PUSH_DINGTALK_WEBHOOK",
                        "HOT_PUSH_DINGTALK_SECRET",
                        "HOT_PUSH_TELEGRAM_BOT_TOKEN",
                        "HOT_PUSH_TELEGRAM_CHAT_ID"
                    ]
                }
            }
        },
        "version": "1.0.5"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "superxs777",
        "handle": "superxs777",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/206164402?v=4",
        "kind": "user",
        "linkedUserId": "kn763s5azfbhjaz5hkqrg02mm581gdcn"
    },
    "ownerHandle": "superxs777",
    "skill": {
        "_creationTime": 1771642086890,
        "_id": "kd7cpx95qw1r4yp17nkye7ga0d81kv22",
        "badges": [],
        "createdAt": 1771642086890,
        "displayName": "fastfish-hot-news-push 每日新闻热点推送（可设过滤词）",
        "latestVersionId": "k974p7aqdzpn6dbbkrtnx7d6rn81v74r",
        "ownerUserId": "kn763s5azfbhjaz5hkqrg02mm581gdcn",
        "slug": "fastfish-hot",
        "stats": {
            "comments": 0,
            "downloads": 430,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 6
        },
        "summary": "热点推送独立项目。从 api.pearktrue.cn 拉取热点，支持飞书\/钉钉\/Telegram 推送；推送需至少配置一个渠道的 env。可配置拉取时间、推送时间、过滤关键词。通过 system.run 直接调用脚本，无需 MCP。当用户需要拉取热点、知乎热搜、配置热点推送或设置定时推送时使用本技能。",
        "tags": {
            "latest": "k974p7aqdzpn6dbbkrtnx7d6rn81v74r"
        },
        "updatedAt": 1774326056291
    }
}