94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill's requirements and runtime instructions are consistent with a hosted/self-hosted provenance graph service; no disproportionate permissions, installs, or hidden behaviors were found, though u...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771762921951,
        "_id": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
        "changelog": "v1.0.26 - Security & Trust Hardening\n\nInput Trust Boundaries — Added explicit prompt injection guardrails. Stored card content is now declared as DATA not instructions. Rules added for slug validation, raw content forwarding, and injection pattern detection.\nPermissions Manifest — Added formal permissions declaration (exec: false, filesystem: none, network scope, env vars) so the skill passes OpenClaw's security classification without ambiguity.\nSupply Chain Fix — Replaced unpinned npx --yes hyperstack-mcp with version-pinned hyperstack-mcp@1.10.1 across all install configs. Added local install guidance and integrity verification command.\nData Safety Promoted — Data safety warning elevated from a footer note to a named security section in both SKILL.md and README.md, making it visible to scanners and reviewers before tool documentation.\nVersion bump — _meta.json updated to 1.0.25.",
        "changelogSource": "user",
        "createdAt": 1771762921951,
        "parsed": {
            "clawdis": {
                "emoji": "🧠",
                "primaryEnv": "HYPERSTACK_API_KEY",
                "requires": {
                    "env": [
                        "HYPERSTACK_API_KEY",
                        "HYPERSTACK_WORKSPACE"
                    ]
                }
            }
        },
        "version": "1.0.26"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "deeqyaqub1-cmd",
        "handle": "deeqyaqub1-cmd",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/252513480?v=4",
        "kind": "user",
        "linkedUserId": "kn7avsd69g58khqd67bceb88m580sdbb"
    },
    "ownerHandle": "deeqyaqub1-cmd",
    "skill": {
        "_creationTime": 1770764587454,
        "_id": "kd7edj62gcv55qwstr3ta2k8vs80w33d",
        "badges": [],
        "createdAt": 1770764587454,
        "displayName": "HyperStack — Agent Provenance Graph",
        "latestVersionId": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
        "ownerUserId": "kn7avsd69g58khqd67bceb88m580sdbb",
        "slug": "hyperstack",
        "stats": {
            "comments": 0,
            "downloads": 1438,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 27
        },
        "summary": "The Agent Provenance Graph for AI agents — the only memory layer where agents can prove what they knew, trace why they knew it, and coordinate without an LLM...",
        "tags": {
            "HYPERSTACK_API_KEY": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "api-key-required": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "context": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "cost-saving": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "cost-saving api-key-required": "k97ejydrxnr8wnmgtyfj9mqcvd80ysbv",
            "knowledge": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "latest": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "latest agent-memory": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "latest memory": "k97ejydrxnr8wnmgtyfj9mqcvd80ysbv",
            "mcp": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "persistence": "k97ejydrxnr8wnmgtyfj9mqcvd80ysbv",
            "recall": "k975x5tjxc1ydbbzvhd936ssbh81n46t",
            "tokens": "k97ejydrxnr8wnmgtyfj9mqcvd80ysbv"
        },
        "updatedAt": 1772046940588
    }
}