41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement a legitimate IMAP email client, but there are metadata/instruction inconsistencies and a few configuration choices (writing .env, REJECT_UNAUTHORIZED=false) that warrant...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770823426808,
        "_id": "k97d8ymzdqsa0sr79py43g43sn80zyrm",
        "changelog": "Added security metadata (skill.json) declaring credentials and install requirements. Removed redundant README.md.",
        "changelogSource": "user",
        "createdAt": 1770823426808,
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "mvarrieur",
        "handle": "mvarrieur",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1863155?v=4",
        "kind": "user",
        "linkedUserId": "kn7fp43cwbqdm33c9vrwfb9r397zxnq0"
    },
    "ownerHandle": "mvarrieur",
    "skill": {
        "_creationTime": 1769365320036,
        "_id": "kd77ja4eaag7pe0m8gj0ay55t17zwy69",
        "badges": [],
        "createdAt": 1769365320036,
        "displayName": "IMAP Email Reader",
        "latestVersionId": "k97d8ymzdqsa0sr79py43g43sn80zyrm",
        "ownerUserId": "kn7fp43cwbqdm33c9vrwfb9r397zxnq0",
        "slug": "imap-email",
        "stats": {
            "comments": 0,
            "downloads": 4641,
            "installsAllTime": 23,
            "installsCurrent": 20,
            "stars": 0,
            "versions": 4
        },
        "summary": "Read and manage email via IMAP (ProtonMail Bridge, Gmail, etc.). Check for new\/unread messages, fetch content, search mailboxes, and mark as read\/unread. Works with any IMAP server including ProtonMail Bridge.",
        "tags": {
            "latest": "k97d8ymzdqsa0sr79py43g43sn80zyrm"
        },
        "updatedAt": 1774321473147
    }
}