55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly does what it says (scans skill directories and produces reports) but contains scanning-evasion shortcuts and small logic bugs that could hide malicious code or produce misleading resu...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dynamic_code_execution

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774474500550,
        "_id": "k977g0fh5z05dmfqd5h78rqgwx83jr4k",
        "changelog": "Initial release of Security Auditor skill.\n\n- Scan and audit installed skills for security risks, permission overreach, and suspicious behavior.\n- Supports quick scans, detailed audits, report generation, and side-by-side skill comparison.\n- Identifies risk levels (LOW, MEDIUM, HIGH, CRITICAL) with recommendations for each.\n- Highlights major security red flags: file\/network access, suspicious permissions, and risky code patterns.\n- Includes scripts and reference files for flexible, in-depth security analysis.",
        "changelogSource": "auto",
        "createdAt": 1774474500550,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17ej3c36s8g4re8b70mnsye3583kz6q",
        "displayName": "klemenska",
        "handle": "klemenska",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/62469076?v=4",
        "kind": "user",
        "linkedUserId": "kn7dvhnknqpj4a0n0vg6ad3f6d81bg6g"
    },
    "ownerHandle": "klemenska",
    "skill": {
        "_creationTime": 1774474500550,
        "_id": "kd7as1mdhyyzcdy1efpj7kdgy183jptk",
        "badges": [],
        "createdAt": 1774474500550,
        "displayName": "Klemenska Security Auditor",
        "latestVersionId": "k977g0fh5z05dmfqd5h78rqgwx83jr4k",
        "ownerPublisherId": "s17ej3c36s8g4re8b70mnsye3583kz6q",
        "ownerUserId": "kn7dvhnknqpj4a0n0vg6ad3f6d81bg6g",
        "slug": "klemenska-security-auditor",
        "stats": {
            "comments": 0,
            "downloads": 10,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Scan and audit installed skills for security risks, suspicious patterns, and permission overreach. Use when: (1) before installing a new skill; (2) periodica...",
        "tags": {
            "latest": "k977g0fh5z05dmfqd5h78rqgwx83jr4k"
        },
        "updatedAt": 1774478507770
    }
}