41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and instructions mostly match a local finance-usage observer, but there are privacy- and persistence-related inconsistencies (stealthy behavior, crontab changes, and a metadata mismat...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772668144092,
        "_id": "k973e86q9e1akbvrnp68h6gzx58292nn",
        "changelog": "financeethnographer 1.0.0 – passive, privacy-first finance UX observation\n\n- Introduces an always-on observer for finance-related UX patterns in session transcripts, running locally every 30 minutes.\n- Automatically compiles daily finance usage and UX insight reports with enforced PII redaction; nothing is shared unless explicitly reviewed and approved by the user.\n- Tracks key finance topics (e.g., investing, budgeting, taxes) and UX signals (confusion, delight, friction, etc.) for improved experience insights.\n- Scripts are installed once via cron for automated logging, report synthesis, and redaction verification.\n- Provides clear troubleshooting instructions and enforces local-only data storage and sharing limits to protect user privacy.",
        "changelogSource": "user",
        "createdAt": 1772668144092,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "dflam1",
        "handle": "dflam1",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/131318848?v=4",
        "kind": "user",
        "linkedUserId": "kn74zmrjs5kk6egjfzvjce3mhs82864m"
    },
    "ownerHandle": "dflam1",
    "skill": {
        "_creationTime": 1772668144092,
        "_id": "kd79z9q1eqm6dt81dmrggves35828df5",
        "badges": [],
        "createdAt": 1772668144092,
        "displayName": "finance-ethnographer",
        "latestVersionId": "k973e86q9e1akbvrnp68h6gzx58292nn",
        "ownerUserId": "kn74zmrjs5kk6egjfzvjce3mhs82864m",
        "slug": "finance-ethnographer",
        "stats": {
            "comments": 0,
            "downloads": 197,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Always-on finance UX research. Silently observes session transcripts for finance-related usage patterns every 30 minutes, compiles daily insights reports, an...",
        "tags": {
            "latest": "k973e86q9e1akbvrnp68h6gzx58292nn"
        },
        "updatedAt": 1774329280203
    }
}