47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's code and documentation mostly match its stated purpose (ID two-factor check via juhe.cn), but there are implementation issues that risk leaking secrets and user PII and a minor protocol/se...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774502373331,
        "_id": "k9727vb2ap2vg3fr1ebpb20ma983mw5z",
        "changelog": "- Initial release of juhe-idcard-verify skill for nationwide Chinese ID card real-name authentication.\n- Supports verification of name and ID number consistency via Juhe API.\n- Includes usage instructions for script and direct API calls.\n- Provides guidance for environment setup and error handling.\n- Suitable for scenarios like identity verification, real-name authentication, and ID number matching.",
        "changelogSource": "user",
        "createdAt": 1774502373331,
        "parsed": {
            "clawdis": {
                "emoji": "🆔",
                "primaryEnv": "JUHE_IDCARD_VERIFY_KEY",
                "requires": {
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "JUHE_IDCARD_VERIFY_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s177jncsg336bzyjhff66cjn8n83j6jg",
        "displayName": "juhe-skills",
        "handle": "juhemcp",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/203600343?v=4",
        "kind": "user",
        "linkedUserId": "kn71s83krazj7yjypd59p2v5ss83jxah"
    },
    "ownerHandle": "juhemcp",
    "skill": {
        "_creationTime": 1774502373331,
        "_id": "kd747s3ytn75ms6jehqact6pkh83mbds",
        "badges": [],
        "createdAt": 1774502373331,
        "displayName": "身份证二要素核验 - 聚合数据",
        "latestVersionId": "k9727vb2ap2vg3fr1ebpb20ma983mw5z",
        "ownerPublisherId": "s177jncsg336bzyjhff66cjn8n83j6jg",
        "ownerUserId": "kn71s83krazj7yjypd59p2v5ss83jxah",
        "slug": "juhe-idcard-verify",
        "stats": {
            "comments": 0,
            "downloads": 26,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "身份证实名认证。验证姓名与身份证号是否一致，支持全国居民身份证。使用场景：用户说\"身份证认证\"、\"实名认证\"、\"验证身份证\"、\"姓名和身份证是否匹配\"、\"身份证二要素核验\"等。通过聚合数据（juhe.cn）API 实时核验，免费注册每天免费调用。",
        "tags": {
            "latest": "k9727vb2ap2vg3fr1ebpb20ma983mw5z"
        },
        "updatedAt": 1774504314204
    }
}