47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it says (a CLI wrapper for a personal Kan.bn TODO API) but the package metadata omits the credentials it actually needs and the runtime reads ~/.bashrc for exported variable...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773232746584,
        "_id": "k979frys6e95jw8c8rgmred3d182pj20",
        "changelog": "Improve trigger coverage, add workflow references, add evals, add smoke test docs, and add local self-test command.",
        "changelogSource": "user",
        "createdAt": 1773232746584,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Qihao",
        "handle": "wujiao233",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/16509323?v=4",
        "kind": "user",
        "linkedUserId": "kn79nj5765z85e8frta5dnmbsh81rdh8"
    },
    "ownerHandle": "wujiao233",
    "skill": {
        "_creationTime": 1772521569834,
        "_id": "kd76sb2aqaxbnk2c9k355t40gn826nag",
        "badges": [],
        "createdAt": 1772521569834,
        "displayName": "Kan.bn TODO API",
        "latestVersionId": "k979frys6e95jw8c8rgmred3d182pj20",
        "ownerUserId": "kn79nj5765z85e8frta5dnmbsh81rdh8",
        "slug": "kanbn-todo-api",
        "stats": {
            "comments": 0,
            "downloads": 324,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 3
        },
        "summary": "Manage personal TODOs in Kan.bn through API-driven operations. Use this whenever the user wants to create, update, move, prioritize, search, summarize, or cl...",
        "tags": {
            "latest": "k979frys6e95jw8c8rgmred3d182pj20"
        },
        "updatedAt": 1774328660275
    }
}