55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and runtime instructions match an IMAP/SMTP email tool, but registry metadata omits the sensitive environment variables it requires and the skill's runtime can invoke the OpenClaw CLI...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774258529012,
        "_id": "k97fb9qeqraxvpzez1s685n9s583fhwq",
        "changelog": "v1.0.3 — consistent naming: all paths, credentials, and references now use imap-smtp-mail",
        "changelogSource": "user",
        "createdAt": 1774258529012,
        "parsed": {
            "clawdis": {
                "emoji": "EM",
                "requires": {
                    "bins": [
                        "node",
                        "npm",
                        "openclaw"
                    ]
                }
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Umbra",
        "handle": "mohamed-hammane",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/35642940?v=4",
        "kind": "user",
        "linkedUserId": "kn71mmn1vst817r9622exn54vn83fw03"
    },
    "ownerHandle": "mohamed-hammane",
    "skill": {
        "_creationTime": 1774256320574,
        "_id": "kd775509gxy2tb9ervk90zyqkx83eexx",
        "badges": [],
        "createdAt": 1774256320574,
        "displayName": "IMAP SMTP Email",
        "latestVersionId": "k97fb9qeqraxvpzez1s685n9s583fhwq",
        "ownerUserId": "kn71mmn1vst817r9622exn54vn83fw03",
        "slug": "imap-smtp-mail",
        "stats": {
            "comments": 0,
            "downloads": 26,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "Read and send email via IMAP\/SMTP using local Node scripts. Use when the agent needs to check inboxes, fetch email content, search messages, download attachm...",
        "tags": {
            "latest": "k97fb9qeqraxvpzez1s685n9s583fhwq"
        },
        "updatedAt": 1774274702697
    }
}