41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's declared purpose (inject 1Password secrets into a macOS LaunchAgent) matches the files and requirements, but it contradicts its own security claim by writing secrets (including the 1Passwo...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772823958636,
        "_id": "k97dn7tjjdjt7j1jbgzrgtq96s82ctgw",
        "changelog": "Initial release of gateway-env-injector.\n\n- Injects API keys from 1Password into macOS LaunchAgent plists using PlistBuddy.\n- Prevents plaintext secrets on disk while ensuring LaunchAgents have required environment variables.\n- Requires 1Password CLI (`op`) and Bash; uses service account token from environment.\n- Customizable for your own 1Password items and desired environment variables.\n- Designed for secure OpenClaw deployments on macOS.",
        "changelogSource": "auto",
        "createdAt": 1772823958636,
        "parsed": {
            "clawdis": {
                "emoji": "🔐",
                "primaryEnv": "OP_SERVICE_ACCOUNT_TOKEN",
                "requires": {
                    "bins": [
                        "op",
                        "bash"
                    ],
                    "env": [
                        "OP_SERVICE_ACCOUNT_TOKEN"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Nissan Dookeran",
        "handle": "nissan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/12583?v=4",
        "kind": "user",
        "linkedUserId": "kn72rbtybr3jzhcj2260qz6p2181x1mr"
    },
    "ownerHandle": "nissan",
    "skill": {
        "_creationTime": 1772823958636,
        "_id": "kd735rxe63aayz3ydy08ankas982dke0",
        "badges": [],
        "createdAt": 1772823958636,
        "displayName": "Gateway Env Injector",
        "latestVersionId": "k97dn7tjjdjt7j1jbgzrgtq96s82ctgw",
        "ownerUserId": "kn72rbtybr3jzhcj2260qz6p2181x1mr",
        "slug": "gateway-env-injector",
        "stats": {
            "comments": 0,
            "downloads": 192,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Safely inject API keys from 1Password into macOS LaunchAgent plists using PlistBuddy. Use when running OpenClaw on macOS and storing secrets in 1Password — a...",
        "tags": {
            "latest": "k97dn7tjjdjt7j1jbgzrgtq96s82ctgw"
        },
        "updatedAt": 1774330069739
    }
}