55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement furry image generation via the Neta API as claimed, but it silently reads specific user dotfiles for a NETA_TOKEN and contains a few mismatches between code, README, and...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774393179482,
        "_id": "k9777mqnyhjy8y202fephtezbh83g6ya",
        "changelog": "Version 1.0.1\n\n- Updated description for improved clarity and accuracy.\n- Added requirement and instructions for setting the Neta API token (NETA_TOKEN env var or --token flag).\n- Provided relevant API token signup links for global and China users.\n- Removed `--style` option from the listed options.",
        "changelogSource": "auto",
        "createdAt": 1774393179482,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1700se1ym0cqwmmannczhx57183gf78",
        "displayName": "omactiengartelle",
        "handle": "omactiengartelle",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258436340?v=4",
        "kind": "user",
        "linkedUserId": "kn7dtyvywv4tx72nsv1g4cjxss83h1tb"
    },
    "ownerHandle": "omactiengartelle",
    "skill": {
        "_creationTime": 1774355108488,
        "_id": "kd743cn1pj2azxk6zqgcpyyptn83g5jb",
        "badges": [],
        "createdAt": 1774355108488,
        "displayName": "Furry Art Skill",
        "latestVersionId": "k9777mqnyhjy8y202fephtezbh83g6ya",
        "ownerPublisherId": "s1700se1ym0cqwmmannczhx57183gf78",
        "ownerUserId": "kn7dtyvywv4tx72nsv1g4cjxss83h1tb",
        "slug": "furry-art-skill",
        "stats": {
            "comments": 0,
            "downloads": 19,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Generate furry art images using the Neta AI API. Returns a direct image URL.",
        "tags": {
            "latest": "k9777mqnyhjy8y202fephtezbh83g6ya"
        },
        "updatedAt": 1774393306864
    }
}