41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (read-only API lookup) is plausible, but the instructions instruct the agent to read an internal OpenClaw config file to fetch Feishu credentials — a mismatch that could expose sec...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772728268917,
        "_id": "k974yenaa7hb9a7pz83g2sys9s82b9b8",
        "changelog": "Initial release",
        "changelogSource": "user",
        "createdAt": 1772728268917,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "deadblue",
        "handle": "deadblue22",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/448649?v=4",
        "kind": "user",
        "linkedUserId": "kn7919ay445y6dhq56dtyvvda18242sm"
    },
    "ownerHandle": "deadblue22",
    "skill": {
        "_creationTime": 1772728268917,
        "_id": "kd7171v3d0yqd5qszeg140mg2s82apjz",
        "badges": [],
        "createdAt": 1772728268917,
        "displayName": "Feishu API Lookup",
        "latestVersionId": "k974yenaa7hb9a7pz83g2sys9s82b9b8",
        "ownerUserId": "kn7919ay445y6dhq56dtyvvda18242sm",
        "slug": "feishu-api-lookup",
        "stats": {
            "comments": 0,
            "downloads": 228,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Look up Feishu Open API documentation. Activate when: needing to find a specific Feishu API endpoint, understanding API parameters\/response, writing scripts...",
        "tags": {
            "latest": "k974yenaa7hb9a7pz83g2sys9s82b9b8"
        },
        "updatedAt": 1774329618113
    }
}