59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The SKILL.md claims to be an LLM “instruction layer” for a local Hardstop plugin and tells the agent to run local scripts and read/write files, but the skill bundle contains no install, no code, and n...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772455811512,
        "_id": "k97dqvq55m3w5h6400mt2fbmtd825n6a",
        "changelog": "HS Skill v1.5 clarifies plugin architecture and skip behavior — no file changes.\n\n- Clarified that referenced Bash commands (hs_cmd.py) are part of the local Hardstop plugin, not remote scripts.\n- Stated that credential paths shown are block patterns only—contents are never read or accessed.\n- Documented that the \/hs skip (bypass) mechanism requires explicit user invocation and applies only to the next N commands, never globally.\n- Explained the deterministic blocking role of the plugin relative to this LLM-level skill.\n- No logic or protocol changes. No change to behavior or file structure.",
        "changelogSource": "user",
        "createdAt": 1772455811512,
        "parsed": {
            "clawdis": {
                "author": "Francesco Marinoni Moretto"
            }
        },
        "version": "1.4.8"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Francesco Marinoni Moretto",
        "handle": "frmoretto",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/47558125?v=4",
        "kind": "user",
        "linkedUserId": "kn7712gz5gc9pr8qr8ybxgq63981jghf"
    },
    "ownerHandle": "frmoretto",
    "skill": {
        "_creationTime": 1771792297586,
        "_id": "kd79fjkw4k49y4gawvrdfzb5y981np0r",
        "badges": [],
        "createdAt": 1771792297586,
        "displayName": "HardStop",
        "latestVersionId": "k97dqvq55m3w5h6400mt2fbmtd825n6a",
        "ownerUserId": "kn7712gz5gc9pr8qr8ybxgq63981jghf",
        "slug": "hs",
        "stats": {
            "comments": 0,
            "downloads": 406,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "ACTIVATE THIS SKILL FOR ANY SHELL COMMAND OR FILE READ. Check curl, wget, rm, sudo, apt, dpkg, chmod, dd, format, powershell, bash, sh. Check pipe patterns l...",
        "tags": {
            "latest": "k97dqvq55m3w5h6400mt2fbmtd825n6a"
        },
        "updatedAt": 1772455823363
    }
}