47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's code and instructions match a Feishu task-management toolkit, but metadata omits required credentials and the bundle includes embedded app credentials and an OAuth token—an unexpected and ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773197460312,
        "_id": "k970gvrgse21qdmjwentqygped82pp7e",
        "changelog": "Initial release of feishu-task-management-skill.\n\n- Provides Feishu Task management via a local Python toolkit with app credentials and optional user token support.\n- Supports creating, updating, completing, reopening, deleting tasks, and managing task members.\n- Resolves members using a locally synced member table and alias mapping—no ad hoc lookups.\n- Includes strict write-safety and command selection rules to avoid destructive or ambiguous operations.\n- Scope excludes reminders, tasklists, dependencies, repeat rules, custom complete, and attachments.",
        "changelogSource": "user",
        "createdAt": 1773197460312,
        "version": "0.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "@_@",
        "handle": "owrig",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/50366371?v=4",
        "kind": "user",
        "linkedUserId": "kn78s40h3ecxhm6yzybv8mqb1n81tmwj"
    },
    "ownerHandle": "owrig",
    "skill": {
        "_creationTime": 1773197460312,
        "_id": "kd75wd0v4vng6ekcdyhrjm70ms82pf4d",
        "badges": [],
        "createdAt": 1773197460312,
        "displayName": "feishu-task-management-skill",
        "latestVersionId": "k970gvrgse21qdmjwentqygped82pp7e",
        "ownerUserId": "kn78s40h3ecxhm6yzybv8mqb1n81tmwj",
        "slug": "feishu-task-management-skill",
        "stats": {
            "comments": 0,
            "downloads": 144,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Manage Feishu tasks through a local Python toolkit that always has app credentials and can optionally act as a user for task APIs when OAuth user tokens are...",
        "tags": {
            "latest": "k970gvrgse21qdmjwentqygped82pp7e"
        },
        "updatedAt": 1774331676363
    }
}