65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to be a legitimate Huawei OBS SDK guide, but it reads sensitive credentials from environment or a .env file while the skill metadata does not declare any required credentials—this mi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773335115906,
        "_id": "k974sayz95cqq8jhsft13hce7h82saab",
        "changelog": "huawei-obs-skill v1.0.0\n\n- 初始发布，提供华为云 OBS（对象存储服务）Python SDK 的核心使用方法和实践指南。\n- 覆盖 SDK 安装、客户端初始化、文件上传\/下载、存储桶管理、对象管理等操作。\n- 包含代码示例和常用操作入口，便于快速集成与上手。\n- 给出安全最佳实践和错误处理建议。",
        "changelogSource": "user",
        "createdAt": 1773335115906,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "IdiosyncraticDragon",
        "handle": "idiosyncraticdragon",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/3750460?v=4",
        "kind": "user",
        "linkedUserId": "kn7fz7xq8ty6xd28d9cczp0v4h82kkce"
    },
    "ownerHandle": "idiosyncraticdragon",
    "skill": {
        "_creationTime": 1773335115906,
        "_id": "kd711qan8g1zz526wy8f0x66xs82rnhj",
        "badges": [],
        "createdAt": 1773335115906,
        "displayName": "Huawei Cloud OBS SDK",
        "latestVersionId": "k974sayz95cqq8jhsft13hce7h82saab",
        "ownerUserId": "kn7fz7xq8ty6xd28d9cczp0v4h82kkce",
        "slug": "huawei-obs-skill",
        "stats": {
            "comments": 0,
            "downloads": 133,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "华为云 OBS 对象存储 SDK 使用指南。包含 SDK 安装、初始化客户端、文件上传\/下载、管理存储桶、管理对象等核心操作的最佳实践和代码示例。使用当需要操作华为云 OBS 对象存储时。",
        "tags": {
            "latest": "k974sayz95cqq8jhsft13hce7h82saab"
        },
        "updatedAt": 1774332615514
    }
}