47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's instructions claim to fetch and cache Shopify tokens from Supabase and require environment credentials, but the package metadata omits these requirements and no install/binary is provided ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773759859835,
        "_id": "k97ch6m8sy5wyr7d483bwrmx5s833q30",
        "changelog": "Initial release of icosmos-shopify: Shopify store operation and diagnostics tool.\n\n- Provides read-only diagnostic capabilities for store auditing, theme\/product checks, checkout testing, and metrics monitoring.\n- Only write action is publishing Shopify blog posts, requires explicit --confirm flag.\n- Syncs store domains and tokens from Supabase at setup.\n- Outputs data in a unified JSON structure for OpenClaw; sensitive data is masked by default.\n- Includes robust error handling and security boundaries for safe diagnostics.",
        "changelogSource": "user",
        "createdAt": 1773759859835,
        "version": "0.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "王新勇(Tacey Wong)",
        "handle": "taceywong",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5282810?v=4",
        "kind": "user",
        "linkedUserId": "kn7et6wvt4t7gejvd1b4rsrq3982zgd1"
    },
    "ownerHandle": "taceywong",
    "skill": {
        "_creationTime": 1773759859835,
        "_id": "kd70jazssk7p2r1ymazwmkz0fn832228",
        "badges": [],
        "canonicalSkillId": "kd7eavn428zfcrwktwca6ee0z58328a6",
        "createdAt": 1773759859835,
        "displayName": "icosmos shopify",
        "forkOf": {
            "at": 1773759859835,
            "kind": "duplicate",
            "skillId": "kd7eavn428zfcrwktwca6ee0z58328a6"
        },
        "latestVersionId": "k97ch6m8sy5wyr7d483bwrmx5s833q30",
        "ownerUserId": "kn7et6wvt4t7gejvd1b4rsrq3982zgd1",
        "slug": "icosmos-shopify",
        "stats": {
            "comments": 0,
            "downloads": 64,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Shopify 店铺运营\/诊断技能：从 Supabase 拉取店铺域名与 token，做装修\/产品\/结账\/指标异常检测，并支持发布引流博文（唯一写操作）。",
        "tags": {
            "latest": "k97ch6m8sy5wyr7d483bwrmx5s833q30"
        },
        "updatedAt": 1774336300699
    }
}