65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it claims (call an on-prem API to review text/files) but it requires a secret token that is not declared in the registry metadata and calls a private IP address — review c...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774407899698,
        "_id": "k973crq9dh6kz64xvbjezv6skd83jb3g",
        "changelog": "- Introduced jiuwu-agent skill for intelligent text and file analysis via 久吾智能体API.\n- Supports both text (GET) and file (POST) review endpoints for scenarios like contract or requirements evaluation.\n- Token authentication is configurable via OpenClaw environment or .env files.\n- Includes detailed API usage instructions, parameters, and examples for both analysis modes.\n- Provides error handling guidelines for common issues such as ambiguous agent names or large files.",
        "changelogSource": "user",
        "createdAt": 1774407899698,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s177px78dn0q61h6czbx9784f983kw7v",
        "displayName": "05u",
        "handle": "05u",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10990830?v=4",
        "kind": "user",
        "linkedUserId": "kn7ay3x54gjnt990cx8n5x4bt982r45x"
    },
    "ownerHandle": "05u",
    "skill": {
        "_creationTime": 1774407899698,
        "_id": "kd71h999p107y46gepqrgv563x83k12x",
        "badges": [],
        "createdAt": 1774407899698,
        "displayName": "久吾智能体",
        "latestVersionId": "k973crq9dh6kz64xvbjezv6skd83jb3g",
        "ownerPublisherId": "s177px78dn0q61h6czbx9784f983kw7v",
        "ownerUserId": "kn7ay3x54gjnt990cx8n5x4bt982r45x",
        "slug": "jiuwu-agent",
        "stats": {
            "comments": 0,
            "downloads": 0,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "调用久吾智能体API进行文本或文件分析处理。支持两种调用方式：(1) 文本内容分析 - 传入name(智能体名称)、docno(文档编号)、content(文本内容)；(2) 文件分析 - 传入name、docno和files(文件列表)进行智能评审。适用于合同评审、需求评审、文档审查等场景。",
        "tags": {
            "latest": "k973crq9dh6kz64xvbjezv6skd83jb3g"
        },
        "updatedAt": 1774409516089
    }
}