65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (static analysis of Kubernetes YAML) is plausible, but the instructions reference posting manifests to an external API (and include vendor links/pricing) without declaring w...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774081931470,
        "_id": "k97fxvbggcq67bhb39kewc96dd83bs8n",
        "changelog": "Kubernetes Security Review 1.0.0 – Initial Release\n\n- Launch of a tool to analyze Kubernetes YAML manifests for security misconfigurations, best practices violations, and compliance risks.\n- Provides static analysis for vulnerabilities such as missing security contexts, dangerous RBAC settings, exposed secrets, and improper resource limits.\n- Integrates with CI\/CD workflows and is suitable for DevOps, security teams, and Kubernetes administrators.\n- Includes a \/review-k8s POST endpoint that returns detailed findings, severity ratings, recommendations, and a compliance score.\n- Offers multiple pricing tiers (Free, Developer, Professional, Enterprise) to accommodate different usage levels.",
        "changelogSource": "auto",
        "createdAt": 1774081931470,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ToolWeb",
        "handle": "krishnakumarmahadevan-cmd",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/245780162?v=4",
        "kind": "user",
        "linkedUserId": "kn7fvt8nzppepr4d89w8yk0y4s82sf3g"
    },
    "ownerHandle": "krishnakumarmahadevan-cmd",
    "skill": {
        "_creationTime": 1774081931470,
        "_id": "kd75kyrajt1djdkprp329p1m8583a9bt",
        "badges": [],
        "createdAt": 1774081931470,
        "displayName": "K8s Security Review",
        "latestVersionId": "k97fxvbggcq67bhb39kewc96dd83bs8n",
        "ownerUserId": "kn7fvt8nzppepr4d89w8yk0y4s82sf3g",
        "slug": "k8s-security-review",
        "stats": {
            "comments": 0,
            "downloads": 38,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Analyzes Kubernetes YAML manifests for security misconfigurations, best practices violations, and compliance risks.",
        "tags": {
            "latest": "k97fxvbggcq67bhb39kewc96dd83bs8n"
        },
        "updatedAt": 1774082510621
    }
}