65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated privacy-first behavior mostly matches its instructions, but there are important implementation/permission inconsistencies (how it observes events and how the Sanitizer is invoked) t...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773687602129,
        "_id": "k972exj9zmtqjbq5bezztfrjt9830hm3",
        "changelog": "**Major rework: Skill renamed and fully re-architected as a privacy-first, consent-based personal finance ethnographer.**\n\n- Replaces previous always-on observer and cron-script model with a structured, event-based UX ethnography approach (no background scripts, no PII handling).\n- Now requires explicit user consent before any logging; displays a detailed privacy\/consent notice on first run.\n- Logs strictly abstracted, structured behavioral events with finance relevance tagging—never raw PII or sensitive values.\n- Introduces separate, scheduled pulses (09:00, 13:00, 17:00 PT) for compiling sanitized reports, which are always reviewed by the participant first.\n- All redaction and PII scrubbing is handled exclusively by a Sanitizer subagent, never within the core skill.\n- Storage layout, runtime state, event schema, and behavioral abstraction rules completely revised to enforce strict privacy and user control.",
        "changelogSource": "user",
        "createdAt": 1773687602129,
        "parsed": {
            "clawdis": {
                "emoji": "🔬",
                "requires": {
                    "bins": [
                        "date",
                        "jq",
                        "uuidgen"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "dflam1",
        "handle": "dflam1",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/131318848?v=4",
        "kind": "user",
        "linkedUserId": "kn74zmrjs5kk6egjfzvjce3mhs82864m"
    },
    "ownerHandle": "dflam1",
    "skill": {
        "_creationTime": 1773687602129,
        "_id": "kd746qhv9qtp2tvwfwjpjjpm1x8302aa",
        "badges": [],
        "createdAt": 1773687602129,
        "displayName": "finance-ethnographer 2",
        "latestVersionId": "k972exj9zmtqjbq5bezztfrjt9830hm3",
        "ownerUserId": "kn74zmrjs5kk6egjfzvjce3mhs82864m",
        "slug": "finance-ethnographer2",
        "stats": {
            "comments": 0,
            "downloads": 78,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Privacy-first UX research ethnographer for OpenClaw with a personal-finance lens. Auto-invoked to observe and log structured behavioral events (no inference)...",
        "tags": {
            "latest": "k972exj9zmtqjbq5bezztfrjt9830hm3"
        },
        "updatedAt": 1774335468998
    }
}