65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The SKILL.md describes a public-facing morning brief (weather, sports, RCM news) but the included code silently reads the user's Gmail inbox using credentials that are not declared — this mismatch cou...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774463211484,
        "_id": "k97es22mzbftp96qaktfmk3tfn83jfd4",
        "changelog": "Sanitized: removed hardcoded email, excluded private briefing logs",
        "changelogSource": "user",
        "createdAt": 1774463211484,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175cnwjh803w9986n2qrmewa983jt40",
        "displayName": "j3m2b",
        "handle": "j3m2b",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/203656507?v=4",
        "kind": "user",
        "linkedUserId": "kn7d21prbsn9ze6jj0gsem4jms835q94"
    },
    "ownerHandle": "j3m2b",
    "skill": {
        "_creationTime": 1774462877656,
        "_id": "kd7e7p89aad8qkmy109fmcc82583ky19",
        "badges": [],
        "createdAt": 1774462877656,
        "displayName": "Morning Brief",
        "latestVersionId": "k97es22mzbftp96qaktfmk3tfn83jfd4",
        "ownerPublisherId": "s175cnwjh803w9986n2qrmewa983jt40",
        "ownerUserId": "kn7d21prbsn9ze6jj0gsem4jms835q94",
        "slug": "jb-morning-brief",
        "stats": {
            "comments": 0,
            "downloads": 12,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Delivers a daily 7 AM CDT briefing with local weather, one key healthcare revenue insight, Pittsburgh sports updates, and seasonal fantasy baseball news.",
        "tags": {
            "latest": "k97es22mzbftp96qaktfmk3tfn83jfd4"
        },
        "updatedAt": 1774464717236
    }
}