65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill is coherent with its stated purpose (managing GitHub mirror workflows) but the published metadata omits the required GITHUB_TOKEN credential and the bundle contains code that can close issue...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773719646223,
        "_id": "k979d1ey8jabt9h04gtrvpjq5n8330a7",
        "changelog": "Initial release.",
        "changelogSource": "user",
        "createdAt": 1773719646223,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "grey0758",
        "handle": "grey0758",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/110289906?v=4",
        "kind": "user",
        "linkedUserId": "kn76476zhmdemhzm95gsd1qs2d80gfpd"
    },
    "ownerHandle": "grey0758",
    "skill": {
        "_creationTime": 1773719646223,
        "_id": "kd71hqvaddnnm9k3020hvz5g7983220s",
        "badges": [],
        "createdAt": 1773719646223,
        "displayName": "GitHub Safe Sync",
        "latestVersionId": "k979d1ey8jabt9h04gtrvpjq5n8330a7",
        "ownerUserId": "kn76476zhmdemhzm95gsd1qs2d80gfpd",
        "slug": "github-safe-sync",
        "stats": {
            "comments": 0,
            "downloads": 45,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Inspect, trigger, and clean up GitHub mirror repositories that use a safe-sync GitHub Actions workflow. Use when Codex needs to work on repository mirroring...",
        "tags": {
            "git-github": "k979d1ey8jabt9h04gtrvpjq5n8330a7",
            "latest": "k979d1ey8jabt9h04gtrvpjq5n8330a7",
            "self-hosted-automation": "k979d1ey8jabt9h04gtrvpjq5n8330a7"
        },
        "updatedAt": 1774335719999
    }
}