55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly does what it claims (calls HSCIQ MCP endpoints) but registry metadata omits the required API key and there are small inconsistencies in declared requirements vs. the included code and...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773977127523,
        "_id": "k974rpz7srcx8sfntzgv9pbcxn839bd5",
        "changelog": "修复注册元数据：添加 env 和 credentials 声明（解决 Suspicious 标记）",
        "changelogSource": "user",
        "createdAt": 1773977127523,
        "version": "2.0.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "toucao",
        "handle": "toucao",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/39644881?v=4",
        "kind": "user",
        "linkedUserId": "kn78qtdbc3d51h0rqg1jhcp5en831gwk"
    },
    "ownerHandle": "toucao",
    "skill": {
        "_creationTime": 1773651182943,
        "_id": "kd7bhzmpaebvbyfygvdnfgcbfh831jyg",
        "badges": [],
        "createdAt": 1773651182943,
        "displayName": "HSCIQ MCP - 海关编码查询",
        "latestVersionId": "k974rpz7srcx8sfntzgv9pbcxn839bd5",
        "ownerUserId": "kn78qtdbc3d51h0rqg1jhcp5en831gwk",
        "slug": "hsciq-mcp",
        "stats": {
            "comments": 0,
            "downloads": 127,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 10
        },
        "summary": "HS Code Lookup for Chinese Products. Query customs codes, tariff rates, declaration elements, and regulatory requirements via HSCIQ MCP API.",
        "tags": {
            "China": "k978jfdpyyf4sd0zdy5mr96dn1832y1d",
            "Customs": "k978jfdpyyf4sd0zdy5mr96dn1832y1d",
            "HS Code Lookup for Chinese Products": "k978jfdpyyf4sd0zdy5mr96dn1832y1d",
            "MCP": "k978jfdpyyf4sd0zdy5mr96dn1832y1d",
            "Tariff Classification": "k978jfdpyyf4sd0zdy5mr96dn1832y1d",
            "Trade": "k978jfdpyyf4sd0zdy5mr96dn1832y1d",
            "classification": "k97c82evqssywbdh266q2kyj41830q8e",
            "customs": "k97c82evqssywbdh266q2kyj41830q8e",
            "hs-code": "k97c82evqssywbdh266q2kyj41830q8e",
            "latest": "k974rpz7srcx8sfntzgv9pbcxn839bd5",
            "mcp": "k97c82evqssywbdh266q2kyj41830q8e",
            "trade": "k97c82evqssywbdh266q2kyj41830q8e"
        },
        "updatedAt": 1774335068069
    }
}