55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The package appears to implement a local 'reflective memory' tool (keep) that reasonably matches its name, but the runtime instructions ask the agent to persist a protocol block into the agent workspa...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774351163501,
        "_id": "k97erqe93pb9w7cb4r3y32h0wh83g5z0",
        "changelog": "Major update with expanded API, flow-based operations, and enhanced documentation.\n\n- Introduces new flow-based API (`keep_flow`, `keep_prompt`, `keep_help`) with standardized parameters for all operations.\n- Protocol Block now uses flow and prompt tool calls instead of direct CLI commands; protocol integrated as a workspace-local file.\n- Adds support for linking provenance of notes and documents using `informs` \/ `informed_by` tags.\n- Documented tools, parameters, and search steering mechanisms including temporal filtering and relevance bias.\n- Extensive new documentation and CLI\/flow usage references; onboarding and guidance materials significantly updated.\n- System integration models updated (MCP, CLI parity, OpenClaw, Claude Code, Kiro, Codex compatibility).",
        "changelogSource": "auto",
        "createdAt": 1774351163501,
        "parsed": {
            "clawdis": {
                "emoji": "🪞",
                "install": [
                    {
                        "bins": [
                            "keep"
                        ],
                        "id": "uv",
                        "kind": "uv",
                        "label": "Install keep with local models",
                        "package": "keep-skill[local]"
                    }
                ],
                "requires": {
                    "anyBins": [
                        "python",
                        "python3"
                    ],
                    "bins": [
                        "uv"
                    ]
                }
            }
        },
        "version": "0.109.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s174stemh4f7w68eeqj22y15c583etgc",
        "displayName": "hughpyle",
        "handle": "hughpyle",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/150244?v=4",
        "kind": "user",
        "linkedUserId": "kn72wa47ddf3nr5g4kv7xgt27s8092gt"
    },
    "ownerHandle": "hughpyle",
    "skill": {
        "_creationTime": 1769885406128,
        "_id": "kd7609b7s68dpc08jhypzbv7bs8092eh",
        "badges": [],
        "createdAt": 1769885406128,
        "displayName": "Reflective Memory",
        "latestVersionId": "k97erqe93pb9w7cb4r3y32h0wh83g5z0",
        "ownerPublisherId": "s174stemh4f7w68eeqj22y15c583etgc",
        "ownerUserId": "kn72wa47ddf3nr5g4kv7xgt27s8092gt",
        "slug": "keep",
        "stats": {
            "comments": 0,
            "downloads": 1833,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 9
        },
        "summary": "Reflective Memory",
        "tags": {
            "latest": "k97erqe93pb9w7cb4r3y32h0wh83g5z0",
            "v0.8.1": "k972rtf8td8ajmbkkn6yv17sxx80h406"
        },
        "updatedAt": 1774378609729
    }
}