37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

技能本身实现了飞书对接功能，但清单/元数据与代码不一致并且仓库包含明文应用密钥与本地 token 缓存逻辑——这构成明显的安全与透明性问题，建议在信任并修复之前不要安装或投入生产使用。

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773948035210,
        "_id": "k97as4cxxdtrdzbndzvf3dc0as836zhs",
        "changelog": "feishu-integration 1.0.0\n\n- 全面实现飞书开放平台接口封装，支持文档、知识库、文件上传、Markdown导入等。\n- 新增群聊欢迎机器人：自动检测新成员，分批@、欢迎语模板、夜间静默和冷却机制。\n- 增强消息解析能力，支持富文本、文本、卡片、图片OCR和引用消息解析。\n- 内置tenant_access_token自动刷新、脚本快速调用示例及标准错误处理指引。\n- 提供速率限制说明及大文档安全写入最佳实践。\n- 详细操作指令、配置指导与扩展方法文档。",
        "changelogSource": "auto",
        "createdAt": 1773948035210,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "莫循",
        "handle": "moxunjinmu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/68231637?v=4",
        "kind": "user",
        "linkedUserId": "kn7fndrnpsmws8dvrwspj82p7s8270ga"
    },
    "ownerHandle": "moxunjinmu",
    "skill": {
        "_creationTime": 1773948035210,
        "_id": "kd71bskgr1g3ptnqwc8zz4rgbn836hqc",
        "badges": [],
        "createdAt": 1773948035210,
        "displayName": "Feishu Integration",
        "latestVersionId": "k97as4cxxdtrdzbndzvf3dc0as836zhs",
        "ownerUserId": "kn7fndrnpsmws8dvrwspj82p7s8270ga",
        "slug": "feishu-integration",
        "stats": {
            "comments": 0,
            "downloads": 52,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 0,
            "versions": 1
        },
        "summary": "提供飞书开放平台API统一调用与token管理，支持文档、知识库、文件操作，Markdown导入，消息解析及群欢迎机器人功能。",
        "tags": {
            "latest": "k97as4cxxdtrdzbndzvf3dc0as836zhs"
        },
        "updatedAt": 1773948110933
    }
}