59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill claims to be an advanced OpenClaw audit pack and lists eight audit commands, but it provides no code, no install instructions for those tools, and no provenance for the declared dependency —...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772455249110,
        "_id": "k97fvn6s9vgnxn3kebjh9b7951824040",
        "changelog": "Initial release of firm-advanced-security-pack.\n\n- Introduces 8 advanced security audit tools for OpenClaw configurations.\n- Covers areas such as secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBins profiles, and group policy defaults.\n- Requires mcp-openclaw-extensions version 3.0.0 or higher.\n- Provides critical and high-severity checks for comprehensive security auditing.",
        "changelogSource": "auto",
        "createdAt": 1772455249110,
        "parsed": {
            "clawdis": []
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "romainsantoli-web",
        "handle": "romainsantoli-web",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/246739959?v=4",
        "kind": "user",
        "linkedUserId": "kn71jwfkxm3jzawn6e9a07kewx8204rq"
    },
    "ownerHandle": "romainsantoli-web",
    "skill": {
        "_creationTime": 1772455249110,
        "_id": "kd794jck1qshjye2grdj08jm7n8254ah",
        "badges": [],
        "createdAt": 1772455249110,
        "displayName": "Firm Advanced Security Pack",
        "latestVersionId": "k97fvn6s9vgnxn3kebjh9b7951824040",
        "ownerUserId": "kn71jwfkxm3jzawn6e9a07kewx8204rq",
        "slug": "firm-advanced-security-pack",
        "stats": {
            "comments": 0,
            "downloads": 230,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Advanced security audit pack covering secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBin...",
        "tags": {
            "latest": "k97fvn6s9vgnxn3kebjh9b7951824040"
        },
        "updatedAt": 1772455268142
    }
}