59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill largely does what it says (compare image models) but the shipped script reads an undeclared 1Password token and will preferentially save outputs to a Proton Drive path without disclosing tha...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774672853226,
        "_id": "k970b1kwmmyysq229av6tfh0t583r0rw",
        "changelog": "Add security_notes: base64 is standard image API response encoding, OP token is for 1Password key retrieval",
        "changelogSource": "user",
        "createdAt": 1774672853226,
        "parsed": {
            "clawdis": {
                "emoji": "🖼️",
                "primaryEnv": "OPENAI_API_KEY",
                "requires": {
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "OPENAI_API_KEY",
                        "OP_SERVICE_ACCOUNT_TOKEN"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17f2fw07zktjmcgagf5c29tbd83rt7v",
        "displayName": "Nissan Dookeran",
        "handle": "nissan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/12583?v=4",
        "kind": "user",
        "linkedUserId": "kn72rbtybr3jzhcj2260qz6p2181x1mr"
    },
    "ownerHandle": "nissan",
    "skill": {
        "_creationTime": 1772398987136,
        "_id": "kd78rmcmetcgg9maas6nsdncpd8239me",
        "badges": [],
        "createdAt": 1772398987136,
        "displayName": "Image Gen Compare",
        "latestVersionId": "k970b1kwmmyysq229av6tfh0t583r0rw",
        "ownerPublisherId": "s17f2fw07zktjmcgagf5c29tbd83rt7v",
        "ownerUserId": "kn72rbtybr3jzhcj2260qz6p2181x1mr",
        "slug": "image-gen-compare",
        "stats": {
            "comments": 0,
            "downloads": 237,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "Side-by-side comparison of paid vs local image generation models — DALL-E 3, FLUX.1-schnell, Gemini Imagen, and others. Generates images from the same prompt...",
        "tags": {
            "latest": "k970b1kwmmyysq229av6tfh0t583r0rw"
        },
        "updatedAt": 1774760687988
    }
}