59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (exporting agent output to GitHub, Jira, Linear, etc.) matches most of what it asks for, but the registry forces multiple unrelated credentials by default and there's an inc...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772318874468,
        "_id": "k971vdx0hgd6ssbpk8ekr3mfrn8213qf",
        "changelog": "firm-delivery-export 1.0.0 — initial release:\n\n- Converts structured JSON workflow output into real deliverables: GitHub PRs, Jira or Linear tickets, Markdown reports, project briefs, and structured documents.\n- Acts as a bridge between agent output and team tooling for final delivery.\n- Supports error handling for API rate limits, auth failures, network issues, and schema validation.\n- Requires environment variables for relevant targets (e.g., GITHUB_TOKEN for GitHub, JIRA_API_TOKEN for Jira, LINEAR_API_KEY for Linear).\n- All output to GitHub is created as draft PRs with \"needs-review\" labels to enforce human review.",
        "changelogSource": "auto",
        "createdAt": 1772318874468,
        "parsed": {
            "clawdis": {
                "primaryEnv": "GITHUB_TOKEN",
                "requires": {
                    "bins": [
                        "curl"
                    ],
                    "env": [
                        "GITHUB_TOKEN",
                        "JIRA_API_TOKEN",
                        "JIRA_BASE_URL",
                        "LINEAR_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "romainsantoli-web",
        "handle": "romainsantoli-web",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/246739959?v=4",
        "kind": "user",
        "linkedUserId": "kn71jwfkxm3jzawn6e9a07kewx8204rq"
    },
    "ownerHandle": "romainsantoli-web",
    "skill": {
        "_creationTime": 1772318874468,
        "_id": "kd70zp93g9btv2r79nj8bvf0dh821typ",
        "badges": [],
        "createdAt": 1772318874468,
        "displayName": "Firm Delivery Export",
        "latestVersionId": "k971vdx0hgd6ssbpk8ekr3mfrn8213qf",
        "ownerUserId": "kn71jwfkxm3jzawn6e9a07kewx8204rq",
        "slug": "firm-delivery-export",
        "stats": {
            "comments": 0,
            "downloads": 224,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Post-processing skill for firm-orchestration: converts the structured JSON output of a multi-agent workflow run into real deliverables — GitHub Pull Requests...",
        "tags": {
            "latest": "k971vdx0hgd6ssbpk8ekr3mfrn8213qf"
        },
        "updatedAt": 1772318888363
    }
}