41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it claims (browser-based LinkedIn automation) but contains several mismatches and risky defaults (hidden file paths, local webhook with permissive CORS, hardcoded user-speci...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770196667094,
        "_id": "k97d8j5chqm65zd9cqa6799d5d80g7jg",
        "changelog": "- Added content calendar support with approval-based publishing workflow and webhook integration.\n- Introduced image upload for posts, including automatic handling of LinkedIn’s image editor.\n- Added new documentation: `references\/content-calendar.md` (content calendar setup and API).\n- Added `scripts\/cc-webhook.py` for webhook handling.\n- Removed `CLAUDE.md` documentation.\n- Updated skill description to reflect content scheduling, approval, and enhanced image handling.",
        "changelogSource": "user",
        "createdAt": 1770196667094,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "red777777",
        "handle": "red777777",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/49646799?v=4",
        "kind": "user",
        "linkedUserId": "kn76vte7nm2ca0ax80ep06n2dd80a5ab"
    },
    "ownerHandle": "red777777",
    "skill": {
        "_creationTime": 1769967543883,
        "_id": "kd7e0f0rfnfhb0v480ep3wb0z180am8h",
        "badges": [],
        "createdAt": 1769967543883,
        "displayName": "Linkedin - automation",
        "latestVersionId": "k97d8j5chqm65zd9cqa6799d5d80g7jg",
        "ownerUserId": "kn76vte7nm2ca0ax80ep06n2dd80a5ab",
        "slug": "inkedin-automation-that-really-works",
        "stats": {
            "comments": 2,
            "downloads": 2521,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 4,
            "versions": 3
        },
        "summary": "LinkedIn automation — post (with image upload), comment (with @mentions), edit\/delete comments, repost, read feed, analytics, like monitoring, engagement tracking, and content calendar with approval workflow. Uses Playwright with persistent browser profile. Use for any LinkedIn task including content strategy, scheduled publishing, engagement analysis, and audience growth.",
        "tags": {
            "latest": "k97d8j5chqm65zd9cqa6799d5d80g7jg"
        },
        "updatedAt": 1774322090299
    }
}