41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (A2A bridge) matches the actions described, but important security and provenance details are missing or underspecified (SSRF protections, signing key handling, network callbacks a...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772403015057,
        "_id": "k9730rdd37mz2bc9h6hq6yhtvh822vtm",
        "changelog": "A2A RC v1.0 rewrite: 8 tools, cancel, subscribe SSE, push CRUD, JWS signing",
        "changelogSource": "user",
        "createdAt": 1772403015057,
        "parsed": {
            "clawdis": []
        },
        "version": "2.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "romainsantoli-web",
        "handle": "romainsantoli-web",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/246739959?v=4",
        "kind": "user",
        "linkedUserId": "kn71jwfkxm3jzawn6e9a07kewx8204rq"
    },
    "ownerHandle": "romainsantoli-web",
    "skill": {
        "_creationTime": 1772343447798,
        "_id": "kd7fj42mc5k2501mpqzgs5p32d823008",
        "badges": [],
        "createdAt": 1772343447798,
        "displayName": "Firm A2a Bridge",
        "latestVersionId": "k9730rdd37mz2bc9h6hq6yhtvh822vtm",
        "ownerUserId": "kn71jwfkxm3jzawn6e9a07kewx8204rq",
        "slug": "firm-a2a-bridge",
        "stats": {
            "comments": 0,
            "downloads": 266,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "Agent-to-Agent (A2A) Protocol RC v1.0 bridge for OpenClaw agents. Enables agent discovery, identity cards, task lifecycle management, push notification confi...",
        "tags": {
            "latest": "k9730rdd37mz2bc9h6hq6yhtvh822vtm"
        },
        "updatedAt": 1774328042858
    }
}