65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill is largely consistent with a QWeather (和风天气) client, but the package metadata omits required credentials and the skill persists plaintext credentials to ~/.config/qweather/.env — these misma...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774789884765,
        "_id": "k976hq1r19zbpafg1h3145ea2s83v9js",
        "changelog": "- 更安全的配置说明，推荐使用环境变量管理 API 凭证，新增配置脚本的安全用法说明。\n- 配置项结构调整，详细区分必需与可选环境变量，并增加 HEFENG_PRIVATE_KEY 支持。\n- 新增“安全注意事项”章节，包括 API 主机验证、凭证保护和文件权限建议。\n- 删除 license.md 文件，不影响功能。",
        "changelogSource": "user",
        "createdAt": 1774789884765,
        "parsed": {
            "clawdis": {
                "author": "fengyu"
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17fx20nzq4qsz087yw1yga7s183hsa0",
        "displayName": "fengyucn",
        "handle": "fengyucn",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/127462220?v=4",
        "kind": "user",
        "linkedUserId": "kn7fvp9jn3w5pkj2ekjpe41vg180grcv"
    },
    "ownerHandle": "fengyucn",
    "skill": {
        "_creationTime": 1773388364066,
        "_id": "kd784vzwy3b4n6ryazdpxjxh1182tg78",
        "badges": [],
        "createdAt": 1773388364066,
        "displayName": "Hefeng Weather - 和风天气",
        "latestVersionId": "k976hq1r19zbpafg1h3145ea2s83v9js",
        "ownerPublisherId": "s17fx20nzq4qsz087yw1yga7s183hsa0",
        "ownerUserId": "kn7fvp9jn3w5pkj2ekjpe41vg180grcv",
        "slug": "hefengweather",
        "stats": {
            "comments": 0,
            "downloads": 147,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "提供基于和风天气API的全面气象数据查询服务,包括实时天气、多天预报、逐小时预报、空气质量、生活指数、气象预警、天文数据、分钟级降水预报、格点天气和地理信息查询。当用户需要查询天气信息、空气质量、气象预警或天文数据时触发此技能。",
        "tags": {
            "latest": "k976hq1r19zbpafg1h3145ea2s83v9js"
        },
        "updatedAt": 1774790510247
    }
}