59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's behavior (it clearly requires a Slack bot token) matches its description, but the published metadata does not declare the required credential—this mismatch and the handling of a highly sen...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771005288456,
        "_id": "k979266vaa7wp1wpbeddnpbv01812ecv",
        "changelog": "**Major update: Expanded documentation and enforced stricter security and setup requirements for Slack bot credential usage.**\n\n- Added detailed setup and authentication instructions, including required OAuth scopes and credential storage rules.\n- Expanded usage and capability explanations, specifying agent action scope and security\/compliance guidelines.\n- Clarified required inputs, supported actions, and example JSON payloads for all Slack operations.\n- Emphasized credential safety: use of environment variables, prohibition of user tokens and hardcoding, and workspace\/permission constraints.\n- Updated tags and version metadata to reflect improved capabilities and security.",
        "changelogSource": "auto",
        "createdAt": 1771005288456,
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "RK905",
        "handle": "rk905",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8699271?v=4",
        "kind": "user",
        "linkedUserId": "kn7235thv9z4ycm31me5eb8dm18122ts"
    },
    "ownerHandle": "rk905",
    "skill": {
        "_creationTime": 1771005023397,
        "_id": "kd7cvrgwwf97w8qfxmmdbzkea1813zzv",
        "badges": [],
        "createdAt": 1771005023397,
        "displayName": "Slack Actions",
        "latestVersionId": "k979266vaa7wp1wpbeddnpbv01812ecv",
        "ownerUserId": "kn7235thv9z4ycm31me5eb8dm18122ts",
        "slug": "geeksdobyte-slack-botskill",
        "stats": {
            "comments": 0,
            "downloads": 516,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Enables authenticated interaction with Slack for sending, editing, deleting, reacting to, and managing messages and pins via a secure bot token.",
        "tags": {
            "latest": "k979266vaa7wp1wpbeddnpbv01812ecv"
        },
        "updatedAt": 1772337704772
    }
}