82/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： clean

OpenClaw： benign

The skill is internally consistent with its stated purpose (it asks for curl and a single TOOLWEB_API_KEY and delegates scoring to portal.toolweb.in), but it sends cluster metadata to an external serv...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773810666086,
        "_id": "k97d97fpqybsvdqvsm4h4kk0bd834sjt",
        "changelog": "Initial release of k8s-security-posture-scorecard.\n\n- Assess Kubernetes clusters across 30 security controls in 7 domains, including RBAC, workload security, network policies, IaC, runtime monitoring, and secrets management.\n- Provides an overall security score, domain-level grades, critical findings, and a prioritized remediation roadmap.\n- Requires use of the ToolWeb API and TOOLWEB_API_KEY for all assessments; local\/manual evaluation is not supported.\n- Supports all major platforms (Linux, macOS, Windows) and common managed Kubernetes offerings (EKS, AKS, GKE, On-Prem).\n- Designed for Kubernetes security audits, CIS Benchmark checks, and security posture reporting for cloud native environments.",
        "changelogSource": "auto",
        "createdAt": 1773810666086,
        "parsed": {
            "clawdis": {
                "emoji": "🛡️",
                "os": [
                    "linux",
                    "darwin",
                    "win32"
                ],
                "primaryEnv": "TOOLWEB_API_KEY",
                "requires": {
                    "bins": [
                        "curl"
                    ],
                    "env": [
                        "TOOLWEB_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ToolWeb",
        "handle": "krishnakumarmahadevan-cmd",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/245780162?v=4",
        "kind": "user",
        "linkedUserId": "kn7fvt8nzppepr4d89w8yk0y4s82sf3g"
    },
    "ownerHandle": "krishnakumarmahadevan-cmd",
    "skill": {
        "_creationTime": 1773810666086,
        "_id": "kd7d2pgwnzw80s7can7t1yp4zs834abr",
        "badges": [],
        "createdAt": 1773810666086,
        "displayName": "Kubernetes Security Posture Scorecard",
        "latestVersionId": "k97d97fpqybsvdqvsm4h4kk0bd834sjt",
        "ownerUserId": "kn7fvt8nzppepr4d89w8yk0y4s82sf3g",
        "slug": "k8s-security-posture-scorecard",
        "stats": {
            "comments": 0,
            "downloads": 54,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Assess Kubernetes cluster security posture across 30 controls covering RBAC, workload security, network policies, IaC, runtime monitoring, and secrets manage...",
        "tags": {
            "latest": "k97d97fpqybsvdqvsm4h4kk0bd834sjt"
        },
        "updatedAt": 1774336843477
    }
}