59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (download files from GitHub) matches its instructions, but the SKILL.md tells the agent to execute third‑party npm packages (npx/gitload-cli) and to accept GitHub tokens (including...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1768122599257,
        "_id": "k972wax7xvjnff3pb3f7svfzds7z13y5",
        "changelog": "Initial release of gitload.\n\n- Easily download files, folders, or entire repositories from GitHub URLs without cloning the whole repo.\n- Supports downloading to custom locations, flattening downloads, and saving as ZIP files.\n- Handles private repositories via GitHub token or gh CLI authentication.\n- Accepts both file and folder URLs, with direct support for main, branch, or custom paths.\n- Designed for quick scaffolding, fetching config\/examples, and offline documentation retrieval.\n- No git history included; operates via GitHub API, not git protocol.",
        "changelogSource": "user",
        "createdAt": 1768122599257,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "waldekmastykarz",
        "handle": "waldekmastykarz",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/11164679?v=4",
        "kind": "user",
        "linkedUserId": "kn74s1zpwarjqb96tbpterkdkn7z0ng4"
    },
    "ownerHandle": "waldekmastykarz",
    "skill": {
        "_creationTime": 1768122599257,
        "_id": "kd79zt9q2ajpbn5pnpa4hq36px7z03rk",
        "badges": [],
        "createdAt": 1768122599257,
        "displayName": "gitload",
        "latestVersionId": "k972wax7xvjnff3pb3f7svfzds7z13y5",
        "ownerUserId": "kn74s1zpwarjqb96tbpterkdkn7z0ng4",
        "slug": "gitload",
        "stats": {
            "comments": 0,
            "downloads": 2718,
            "installsAllTime": 7,
            "installsCurrent": 7,
            "stars": 3,
            "versions": 1
        },
        "summary": "This skill should be used when the user asks to \"download files from GitHub\", \"fetch a folder from a repo\", \"grab code from GitHub\", \"download a GitHub repository\", \"get files from a GitHub URL\", \"clone just a folder\", or needs to download specific files\/folders from GitHub without cloning the entire repo.",
        "tags": {
            "latest": "k972wax7xvjnff3pb3f7svfzds7z13y5"
        },
        "updatedAt": 1772161328659
    }
}