56/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： clean

OpenClaw： suspicious

The skill's runtime instructions require reading/executing local scripts and reading/writing a home config/API key that are not declared in the skill metadata, creating a mismatch and potential risk; ...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774493410528,
        "_id": "k975rxxq8471say924b1ge16px83mbr6",
        "changelog": "Initial release of linkfoxai-image-tool.\n\n- Provides direct execution for image upload, scene fission, product replacement, and auto image matting, prioritizing local scripts.\n- Includes automatic fallback to Linkfox OpenAPI platform tools if local scripts are unavailable or fail.\n- Automatically manages API key retrieval, storage, and request authorization for OpenAPI calls.\n- Ensures strict contract-based request\/response processing and platform-specific script invocation.\n- Covers tool call scenarios such as status and result queries for supported tasks.",
        "changelogSource": "user",
        "createdAt": 1774493410528,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17daw69gp84x2gww3hnm0tsqh83nv19",
        "displayName": "ziniao-open",
        "handle": "ziniao-open",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/106373185?v=4",
        "kind": "user",
        "linkedUserId": "kn71w0k7nr8gzjyvhtsqcy1dcd82t8pv"
    },
    "ownerHandle": "ziniao-open",
    "skill": {
        "_creationTime": 1774493410528,
        "_id": "kd76d4je0ceb9h5zsbe9bkt7ns83m3nn",
        "badges": [],
        "createdAt": 1774493410528,
        "displayName": "linkfoxai-image-tool",
        "latestVersionId": "k975rxxq8471say924b1ge16px83mbr6",
        "ownerPublisherId": "s17daw69gp84x2gww3hnm0tsqh83nv19",
        "ownerUserId": "kn71w0k7nr8gzjyvhtsqcy1dcd82t8pv",
        "slug": "linkfoxai-image-tool",
        "stats": {
            "comments": 0,
            "downloads": 0,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "这是紫鸟开放平台Skill，面向普通用户直接执行任务，无需关心内部调用细节；当用户要求直接完成图片上传、场景裂变、商品替换等当前 Skill 覆盖能力，并希望直接拿到最终结果时，优先通过当前 skill 的本地脚本执行；仅在脚本不存在或执行失败时，才回退到开放平台调用。",
        "tags": {
            "latest": "k975rxxq8471say924b1ge16px83mbr6"
        },
        "updatedAt": 1774493663988
    }
}