55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's purpose and runtime instructions match (Gerrit queries and change actions), but metadata omits the credential requirement and it instructs installing an external pip package without an ins...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.install_untrusted_source

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773825558804,
        "_id": "k975cxq66xbeqgrpmwytgebh1n835c6x",
        "changelog": "Initial release of Gerrit Action Skill.\n\n- Query Gerrit accounts, changes, groups, and projects via CLI with flexible selectors.\n- Perform actions on change queries: add\/remove reviewers or attention, approve, delete, or submit changes.\n- Outputs results as JSON to file or standard output.\n- Strict invocation: only one query selector per command; actions require a change query.\n- Built-in safety guidelines to prevent accidental destructive actions.",
        "changelogSource": "user",
        "createdAt": 1773825558804,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Jia",
        "handle": "craftslab",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/49358172?v=4",
        "kind": "user",
        "linkedUserId": "kn7ah46b2fhdbhv5zrrfp07r3n82d63a"
    },
    "ownerHandle": "craftslab",
    "skill": {
        "_creationTime": 1773825558804,
        "_id": "kd78n3n4tb4gcdcjev2rf7vntn834eg7",
        "badges": [],
        "createdAt": 1773825558804,
        "displayName": "gerritaction",
        "latestVersionId": "k975cxq66xbeqgrpmwytgebh1n835c6x",
        "ownerUserId": "kn7ah46b2fhdbhv5zrrfp07r3n82d63a",
        "slug": "gerritaction",
        "stats": {
            "comments": 0,
            "downloads": 53,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Query Gerrit accounts, changes, groups, or projects and perform actions like adding reviewers, approving, submitting, or deleting changes via the Gerrit API.",
        "tags": {
            "latest": "k975cxq66xbeqgrpmwytgebh1n835c6x"
        },
        "updatedAt": 1774337061757
    }
}