47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it says (fetch monthly Flomo notes and evaluate quality) but it accesses a specific user config path (~/.openclaw/workspace/config/mcporter.json) without declaring it and ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774170886222,
        "_id": "k978hhw69hedtcvf1dn1we9swd83cmm1",
        "changelog": "- Initial release of flomo-archive.\n- Fetches all Flomo notes from a specified month, bypassing API 50-notes-per-request limit via week→day smart fallback.\n- Automatic note quality evaluation included, based on content length, tags, media, and keywords.\n- Outputs summary statistics, detailed quality report, and saves results as JSON to \/tmp.\n- Console options for quality-only evaluation and JSON\/verbose output.\n- Requires mcporter with flomo MCP server.\n- Handles duplicate entries and API rate limiting automatically.",
        "changelogSource": "auto",
        "createdAt": 1774170886222,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "JayShna",
        "handle": "jayshna",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/25737838?v=4",
        "kind": "user",
        "linkedUserId": "kn754zj09jgmxsqxy9ntdta9ah83ca61"
    },
    "ownerHandle": "jayshna",
    "skill": {
        "_creationTime": 1774170886222,
        "_id": "kd7casgxtr533hvkcr6ns4xfb983cvb8",
        "badges": [],
        "createdAt": 1774170886222,
        "displayName": "flomo-archive",
        "latestVersionId": "k978hhw69hedtcvf1dn1we9swd83cmm1",
        "ownerUserId": "kn754zj09jgmxsqxy9ntdta9ah83ca61",
        "slug": "flomo-archive",
        "stats": {
            "comments": 0,
            "downloads": 28,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "获取 Flomo 指定月份的完整笔记并评估质量。当用户说\"查看flomo XX年XX月的全部笔记\"、\"获取flomo某月笔记\"、\"拉取flomo历史记录\"或\"评估flomo笔记质量\"时触发使用。支持智能三级降级策略（周→天）确保完整覆盖，内置质量评估规则自动标记低质量笔记。",
        "tags": {
            "archive": "k978hhw69hedtcvf1dn1we9swd83cmm1",
            "flomo": "k978hhw69hedtcvf1dn1we9swd83cmm1",
            "latest": "k978hhw69hedtcvf1dn1we9swd83cmm1",
            "notes": "k978hhw69hedtcvf1dn1we9swd83cmm1"
        },
        "updatedAt": 1774171009770
    }
}