41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill does what it claims (runs hledger) but its implementation allows shell injection and its documentation incorrectly states it blocks arbitrary shell execution.

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772300230082,
        "_id": "k97dqgx1vmhpzh00qgggtbbwts820ctz",
        "changelog": "hledger skill 1.0.0 initial release:\n\n- Allows execution of `hledger` CLI commands via OpenClaw.\n- Returns structured stdout and stderr output from `hledger`.\n- Supports querying balances, registers, reports, and journal data.\n- Enables automation of personal finance tasks inside OpenClaw.\n- Ensures only `hledger` commands are executable for added security.",
        "changelogSource": "auto",
        "createdAt": 1772300230082,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "bisbeebucky",
        "handle": "bisbeebucky",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/19618919?v=4",
        "kind": "user",
        "linkedUserId": "kn7az5t26nx27gay69mq1sbjkn821mt6"
    },
    "ownerHandle": "bisbeebucky",
    "skill": {
        "_creationTime": 1772300230082,
        "_id": "kd7c157pf5y4vrr7y0z20rjw5d8201h2",
        "badges": [],
        "createdAt": 1772300230082,
        "displayName": "Hledger",
        "latestVersionId": "k97dqgx1vmhpzh00qgggtbbwts820ctz",
        "ownerUserId": "kn7az5t26nx27gay69mq1sbjkn821mt6",
        "slug": "hledger",
        "stats": {
            "comments": 0,
            "downloads": 245,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Execute hledger CLI commands to query balances, registers, reports, and journals, returning structured output from local ledger files.",
        "tags": {
            "latest": "k97dqgx1vmhpzh00qgggtbbwts820ctz"
        },
        "updatedAt": 1774327917336
    }
}