65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill largely matches its stated purpose (wrapping Gomboc.ai scanning/fixing) but contains several inconsistencies and risky practices (metadata vs. docs mismatch, test scripts that print/decode t...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774395134735,
        "_id": "k978fzm5jw0qbczss2afsgfztx83g8k9",
        "changelog": "Gomboc Security Remediation Skill v1.0.0\n\n- Initial release of the Gomboc skill for deterministic security fixes on infrastructure code.\n- Supports scanning and automatic remediation for Terraform, CloudFormation, Kubernetes YAML, and general IaC files.\n- Integrates with CI\/CD (GitHub Actions), local CLI, and agent workflows via MCP server.\n- Provides merge-ready pull requests for detected issues, with a >94% fix acceptance rate.\n- Includes setup guides, example workflows, and configuration via `.gomboc.yml` file.\n- Free community edition available for individuals and small teams.",
        "changelogSource": "user",
        "createdAt": 1774395134735,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s174bb9dazwpw2ey0k2sz1hv5s83hea9",
        "displayName": "Gomboc AI",
        "handle": "gomboc-ai",
        "kind": "org"
    },
    "ownerHandle": "gomboc-ai",
    "skill": {
        "_creationTime": 1774395134735,
        "_id": "kd76mhegkt4a29721ymd6595fh83hz8n",
        "badges": [],
        "createdAt": 1774395134735,
        "displayName": "Deterministic security fixes for infrastructure code via Gomboc.ai Community Edition",
        "latestVersionId": "k978fzm5jw0qbczss2afsgfztx83g8k9",
        "ownerPublisherId": "s174bb9dazwpw2ey0k2sz1hv5s83hea9",
        "ownerUserId": "kn796fwyh8zb4bby7ncms624q983h05a",
        "slug": "gomboc-security",
        "stats": {
            "comments": 0,
            "downloads": 6,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Automatically scan and deterministically fix security issues in Terraform, CloudFormation, and IaC with merge-ready pull requests and CI\/CD integration.",
        "tags": {
            "latest": "k978fzm5jw0qbczss2afsgfztx83g8k9"
        },
        "updatedAt": 1774395409381
    }
}