65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill mostly implements what it claims (CodeQL scanning + LLM analysis) but contains multiple coherence and safety issues: it uses remote LLM calls despite a privacy claim of 'no remote transmissi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773887723295,
        "_id": "k975dndgdmhnj86sdjccnf7j8n837tdr",
        "changelog": "初始版本 - CodeQL+LLM 融合安全扫描器，作者：北京老李",
        "changelogSource": "user",
        "createdAt": 1773887723295,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "codeql"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Terry S Fisher",
        "handle": "43622283",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/42956557?v=4",
        "kind": "user",
        "linkedUserId": "kn70jzhmjk80051ypj2sespqy582fmfx"
    },
    "ownerHandle": "43622283",
    "skill": {
        "_creationTime": 1773887723295,
        "_id": "kd7fhpvd26qp3ggpmqjxa5h2g1837f57",
        "badges": [],
        "createdAt": 1773887723295,
        "displayName": "Li_codeQL_LLM",
        "latestVersionId": "k975dndgdmhnj86sdjccnf7j8n837tdr",
        "ownerUserId": "kn70jzhmjk80051ypj2sespqy582fmfx",
        "slug": "li-codeql-llm",
        "stats": {
            "comments": 0,
            "downloads": 39,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "CodeQL 安全扫描与 LLM 智能分析融合工具。自动检测 CodeQL 安装、扫描指定目录、生成漏洞报告、LLM 分析、Jenkins 集成、输出验证 Checklist。",
        "tags": {
            "latest": "k975dndgdmhnj86sdjccnf7j8n837tdr"
        },
        "updatedAt": 1774337591089
    }
}