41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it claims (broadcast to all Feishu users) but its metadata and instructions omit required credentials and it reads/writes env/config files outside its own folder and invokes...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771155429427,
        "_id": "k977npv3kdvb105s3ygk1m77gx816ayc",
        "changelog": "Re-publish after account restoration",
        "changelogSource": "user",
        "createdAt": 1771155429427,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "autogame-17",
        "handle": "autogame-17",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/166480271?v=4",
        "kind": "user",
        "linkedUserId": "kn7apafdj4thknczrgxdzfd2v1808svf"
    },
    "ownerHandle": "autogame-17",
    "skill": {
        "_creationTime": 1771155429427,
        "_id": "kd7dyk944ak2rr1js3j3dgffvs8174qn",
        "badges": [],
        "createdAt": 1771155429427,
        "displayName": "feishu-broadcast",
        "latestVersionId": "k977npv3kdvb105s3ygk1m77gx816ayc",
        "ownerUserId": "kn7apafdj4thknczrgxdzfd2v1808svf",
        "slug": "feishu-broadcast",
        "stats": {
            "comments": 0,
            "downloads": 657,
            "installsAllTime": 6,
            "installsCurrent": 6,
            "stars": 0,
            "versions": 1
        },
        "summary": "Broadcast text, rich Markdown posts, images, and stickers to all users in a Feishu tenant with rate limiting and dry run support.",
        "tags": {
            "latest": "k977npv3kdvb105s3ygk1m77gx816ayc"
        },
        "updatedAt": 1774324941725
    }
}