72/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： benign

The skill's code, instructions, and required credential (POSTIZ_API_KEY) are coherent with its stated purpose (automating scheduling to Postiz); nothing indicates covert or unrelated access.

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774129859477,
        "_id": "k97af7jqns52tms9v080q60rtx83a946",
        "changelog": "Indie App Marketing Pipeline 1.0.0\n\n- Initial release of a template-driven, automated content scheduling and publishing system for indie iOS apps.\n- Weekly planner generates a week of platform-native social content from a reusable content bank, with zero LLM usage per day.\n- Daily publisher schedules each day’s posts (TikTok, YouTube Shorts, X\/Twitter, Facebook) via Postiz API.\n- Includes setup scripts, sample content bank, customizable schedule, and template support for multiple platforms.\n- Ensures non-repetitive content rotation and tracks posting history automatically.",
        "changelogSource": "auto",
        "createdAt": 1774129859477,
        "parsed": {
            "clawdis": {
                "emoji": "📲",
                "requires": {
                    "bins": [
                        "node"
                    ],
                    "env": [
                        "POSTIZ_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "zakmcintyre",
        "handle": "zakmcintyre",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/45545603?v=4",
        "kind": "user",
        "linkedUserId": "kn762hk6hzyvts7gq588nn62bd81h0dn"
    },
    "ownerHandle": "zakmcintyre",
    "skill": {
        "_creationTime": 1774129859477,
        "_id": "kd73322w9h6c0ayrhkjswebsp983amas",
        "badges": [],
        "createdAt": 1774129859477,
        "displayName": "Indie App Marketing Pipeline",
        "latestVersionId": "k97af7jqns52tms9v080q60rtx83a946",
        "ownerUserId": "kn762hk6hzyvts7gq588nn62bd81h0dn",
        "slug": "indie-app-marketing-pipeline",
        "stats": {
            "comments": 0,
            "downloads": 25,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Template-driven multi-platform content pipeline for indie iOS developers. Generates and schedules a full week of social posts (TikTok, YouTube Shorts, X\/Twit...",
        "tags": {
            "latest": "k97af7jqns52tms9v080q60rtx83a946"
        },
        "updatedAt": 1774131111885
    }
}