65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill largely matches its stated purpose (wrapping Gomboc.ai scanning/fixing) but contains several inconsistencies and risky practices (metadata vs. docs mismatch, test scripts that print/decode t...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774459015585,
        "_id": "k97693nmcqvfdks3671e2trr4d83kn6d",
        "changelog": "- Major documentation update with simplified, streamlined instructions and integration paths.\n- Added new files: .clawhub.yml, CHANGELOG.md, LICENSE, and a code example (examples\/vulnerable.tf).\n- Removed deprecated\/renamed files: .clayhub.yml, LICENSE.md, and obsolete example.\n- Updated \"Quick Start\", features, and CLI command documentation for clarity and ease of use.\n- Enhanced description of agent and CI\/CD integration, configuration, and security practices.",
        "changelogSource": "user",
        "createdAt": 1774459015585,
        "version": "0.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s174bb9dazwpw2ey0k2sz1hv5s83hea9",
        "displayName": "Gomboc AI",
        "handle": "gomboc-ai",
        "kind": "org"
    },
    "ownerHandle": "gomboc-ai",
    "skill": {
        "_creationTime": 1774395134735,
        "_id": "kd76mhegkt4a29721ymd6595fh83hz8n",
        "badges": [],
        "createdAt": 1774395134735,
        "displayName": "Deterministic security fixes for infrastructure code via Gomboc.ai Community Edition",
        "latestVersionId": "k97693nmcqvfdks3671e2trr4d83kn6d",
        "ownerPublisherId": "s174bb9dazwpw2ey0k2sz1hv5s83hea9",
        "ownerUserId": "kn796fwyh8zb4bby7ncms624q983h05a",
        "slug": "gomboc-security",
        "stats": {
            "comments": 0,
            "downloads": 22,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Automatically scan and deterministically fix security issues in Terraform, CloudFormation, and IaC with merge-ready pull requests and CI\/CD integration.",
        "tags": {
            "latest": "k97693nmcqvfdks3671e2trr4d83kn6d"
        },
        "updatedAt": 1774463208163
    }
}