59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill mostly matches its stated purpose (generating LinkedIn posts) but contains a hardcoded merchant key and other oddities (non-standard package mirror, CLI spawn usage) that are disproportionat...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772671977391,
        "_id": "k976qd498yscefjcd3qvac3h6x82acvs",
        "changelog": "Security fix: Move merchant_key to code, remove from SKILL.md to avoid false positive",
        "changelogSource": "user",
        "createdAt": 1772671977391,
        "parsed": {
            "clawdis": {
                "author": "Matt"
            }
        },
        "version": "1.0.7"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "icepopma",
        "handle": "icepopma",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/259024160?v=4",
        "kind": "user",
        "linkedUserId": "kn7652tcbt5p545zgj40zyvmcs8288jv"
    },
    "ownerHandle": "icepopma",
    "skill": {
        "_creationTime": 1772643630018,
        "_id": "kd7d8gnthch6j02q47j6vh58js8283k3",
        "badges": [],
        "createdAt": 1772643630018,
        "displayName": "LinkedIn Post Generator",
        "latestVersionId": "k976qd498yscefjcd3qvac3h6x82acvs",
        "ownerUserId": "kn7652tcbt5p545zgj40zyvmcs8288jv",
        "slug": "linkedin-post-generator",
        "stats": {
            "comments": 0,
            "downloads": 232,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 10
        },
        "summary": "AI-powered LinkedIn post generator for professionals. Create engaging posts, thought leadership content, and career updates using Sloan agent.",
        "tags": {
            "latest": "k976qd498yscefjcd3qvac3h6x82acvs"
        },
        "updatedAt": 1772672043792
    }
}