59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (a restricted wrapper for the 'gog' CLI) mostly matches its code, but the installer replaces the system 'gog' binary (uses sudo), creating a persistent privileged change and...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770803812363,
        "_id": "k974ybzz596afgce0znaqw470h80yhsk",
        "changelog": "- Added limited support for creating calendar events: `gog calendar create  --summary '...' --from '...' --to '...' --json` is now allowed, with critical restrictions.\n- Blocks potentially unsafe flags when creating calendar events (e.g. `--attendees`, `--send-updates`, `--with-meet`, and others to prevent email egress).\n- Documents safe and blocked flags for restricted calendar event creation.\n- No code or file changes were detected; changelog reflects documentation updates only.",
        "changelogSource": "user",
        "createdAt": 1770803812363,
        "parsed": {
            "clawdis": {
                "emoji": "📬",
                "requires": {
                    "bins": [
                        "gog"
                    ]
                }
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "cettoana",
        "handle": "cettoana",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/2841286?v=4",
        "kind": "user",
        "linkedUserId": "kn7dan9srfjm7rd1ck3k5337eh80zqnr"
    },
    "ownerHandle": "cettoana",
    "skill": {
        "_creationTime": 1770780401568,
        "_id": "kd73607f45xb32bdjdzwerjfdd80z8ap",
        "badges": [],
        "createdAt": 1770780401568,
        "displayName": "gog-restricted",
        "latestVersionId": "k974ybzz596afgce0znaqw470h80yhsk",
        "ownerUserId": "kn7dan9srfjm7rd1ck3k5337eh80zqnr",
        "slug": "gog-restricted",
        "stats": {
            "comments": 0,
            "downloads": 1002,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "Google Workspace CLI for Gmail, Calendar, and Auth (restricted via security wrapper).",
        "tags": {
            "latest": "k974ybzz596afgce0znaqw470h80yhsk"
        },
        "updatedAt": 1772061639872
    }
}