41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and instructions match its stated purpose (a local OpenAPI client that stores keys in .env), but it asks for and writes many unrelated API keys in plaintext and will read any environm...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772162833366,
        "_id": "k97b1c7vmnhj95kfgr4snjgthx81yzsh",
        "changelog": "Initial release of freeAPI: The Sovereign Client\n\n- Enables direct execution of OpenAPI\/Swagger endpoints from localhost, with no middleware or gateways involved.\n- Keeps API keys fully private by storing them only in your local `.env` file.\n- Provides a guided, conversational method for onboarding and key management—no CLI commands unless preferred.\n- Automatically fetches OpenAPI specs and handles requests based on natural language prompts.\n- Includes CLI support for advanced or power users as an alternative interface.",
        "changelogSource": "auto",
        "createdAt": 1772162833366,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "splicer scorn",
        "handle": "numbpill3d",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/146873484?v=4",
        "kind": "user",
        "linkedUserId": "kn74k89bze60xrh13a66fwe779819yxr"
    },
    "ownerHandle": "numbpill3d",
    "skill": {
        "_creationTime": 1772162833366,
        "_id": "kd73cx8tjwetr9302dny89dc1d81yfrm",
        "badges": [],
        "createdAt": 1772162833366,
        "displayName": "Freeapi",
        "latestVersionId": "k97b1c7vmnhj95kfgr4snjgthx81yzsh",
        "ownerUserId": "kn74k89bze60xrh13a66fwe779819yxr",
        "slug": "freeapi",
        "stats": {
            "comments": 0,
            "downloads": 357,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Connect directly to any API using its OpenAPI spec with local API key storage, ensuring private, middleware-free requests from your machine.",
        "tags": {
            "latest": "k97b1c7vmnhj95kfgr4snjgthx81yzsh"
        },
        "updatedAt": 1774327456273
    }
}