55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's functionality matches a Feishu mention resolver, but its declared requirements and runtime behavior are inconsistent: it reads sensitive credentials from ~/.openclaw/openclaw.json and writ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773388971540,
        "_id": "k9740a7e5y75c70nyef66ntn1x82vbhd",
        "changelog": "- Initial publication of repository, including all source files and Git metadata\n- Updated SKILL.md to add `write` permission for the workspace cache path (`~\/.openclaw\/workspace\/cache\/feishu_mentions\/**\/*`)\n- No changes to user-facing features or APIs",
        "changelogSource": "user",
        "createdAt": 1773388971540,
        "parsed": {
            "clawdis": []
        },
        "version": "2.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "helong0911-alt",
        "handle": "helong0911-alt",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/229453956?v=4",
        "kind": "user",
        "linkedUserId": "kn77qg78r4c2pw815cfcjm856982v6zx"
    },
    "ownerHandle": "helong0911-alt",
    "skill": {
        "_creationTime": 1773388377024,
        "_id": "kd73ft5a8nt5ye3sqv6htc483582twa0",
        "badges": [],
        "createdAt": 1773388377024,
        "displayName": "feishu-mention",
        "latestVersionId": "k9740a7e5y75c70nyef66ntn1x82vbhd",
        "ownerUserId": "kn77qg78r4c2pw815cfcjm856982v6zx",
        "slug": "feishu-mention",
        "stats": {
            "comments": 0,
            "downloads": 133,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "**PRIORITY: HIGHEST**. **CRITICAL**: You **MUST** use this tool **BEFORE sending any message** to Feishu\/Lark if it contains an \"@\" mention. **Trigger**: You...",
        "tags": {
            "latest": "k9740a7e5y75c70nyef66ntn1x82vbhd"
        },
        "updatedAt": 1774332929719
    }
}