41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill does what it says (uploads and sends images to Feishu), but it embeds hardcoded APP_ID/APP_SECRET in the code and will upload user-provided images through the publisher's Feishu app — a priv...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772685362132,
        "_id": "k97e71mx28bq9w7068aaa4h17582a9s4",
        "changelog": "- Initial release of feishu-image-sender (v1.0.0)\n- Send images to Feishu users via API from shell or Python\n- No extra configuration needed (includes app credentials)\n- Supports image uploading and direct message sending via Feishu open platform",
        "changelogSource": "auto",
        "createdAt": 1772685362132,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "BOMBFUOCK",
        "handle": "bombfuock",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/94738020?v=4",
        "kind": "user",
        "linkedUserId": "kn75jqpq99f2vp98fqg931crn9828y1g"
    },
    "ownerHandle": "bombfuock",
    "skill": {
        "_creationTime": 1772685362132,
        "_id": "kd7aqpxsqw6kn4qs11k89mm3vx82an53",
        "badges": [],
        "createdAt": 1772685362132,
        "displayName": "Feishu Img Send",
        "latestVersionId": "k97e71mx28bq9w7068aaa4h17582a9s4",
        "ownerUserId": "kn75jqpq99f2vp98fqg931crn9828y1g",
        "slug": "feishu-img-send",
        "stats": {
            "comments": 0,
            "downloads": 247,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 1
        },
        "summary": "飞书图片发送 - 使用API直接发送图片到飞书 \/ Send images to Feishu via API",
        "tags": {
            "latest": "k97e71mx28bq9w7068aaa4h17582a9s4"
        },
        "updatedAt": 1774329363974
    }
}