65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it claims (query GMNCODE usage) and the included script is consistent, but the registry metadata does not declare the credentials the skill actually requires and the scrip...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774460236326,
        "_id": "k97e70bwyfxt5gvtpbtm0fr5ah83k7b9",
        "changelog": "Configuration update: hardcoded GMNCODE_BASE_URL to https:\/\/gmncode.cn inside the skill because it is non-sensitive, removed base URL from env configuration guidance, and refreshed Chinese documentation to keep only GMNCODE_EMAIL and GMNCODE_PASSWORD as required secrets.",
        "changelogSource": "user",
        "createdAt": 1774460236326,
        "version": "0.1.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17e8rt3ehqr1jwgx55v915cb983gp22",
        "displayName": "AlexShen",
        "handle": "alex-shen1121",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/73343630?v=4",
        "kind": "user",
        "linkedUserId": "kn75xc5ycn0trqrvpjs5gz4dk982epy9"
    },
    "ownerHandle": "alex-shen1121",
    "skill": {
        "_creationTime": 1774457811611,
        "_id": "kd73a757yandma2dq41fcw4bcx83jt0k",
        "badges": [],
        "createdAt": 1774457811611,
        "displayName": "GMNCODE Usage",
        "latestVersionId": "k97e70bwyfxt5gvtpbtm0fr5ah83k7b9",
        "ownerPublisherId": "s17e8rt3ehqr1jwgx55v915cb983gp22",
        "ownerUserId": "kn75xc5ycn0trqrvpjs5gz4dk982epy9",
        "slug": "gmncode-usage",
        "stats": {
            "comments": 0,
            "downloads": 15,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "通过 HTTP 接口查询 GMNCODE \/ gmncode.cn 中转站的大模型用量，包括 dashboard 汇总、每日趋势、按模型拆分的 token 与费用数据。当用户要求查看 GMNCODE token 用量、每日模型消耗、API\/中转站花费、dashboard 用量，或希望用脚本\/HTTP 接口直接获取...",
        "tags": {
            "latest": "k97e70bwyfxt5gvtpbtm0fr5ah83k7b9"
        },
        "updatedAt": 1774463209010
    }
}