41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill does what it says (executes local Node.js snippets) but allows arbitrary code execution on the host, omits declaring that the Node runtime is required, and includes minor package/manifest mi...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771858024551,
        "_id": "k97796af16tebknwcemgev5s6d81phh4",
        "changelog": "Initial release of local-task-runner.\n\n- Enables execution of Node.js code snippets and scripts directly on the host machine.\n- Provides a safer, more efficient alternative to subagent spawning for local tasks.\n- Handles code isolation, resource cleanup, and configurable timeouts automatically.\n- Includes a command-line interface for running tasks with optional timeout controls.\n- Outputs clear, structured responses for both successful and failed executions.",
        "changelogSource": "auto",
        "createdAt": 1771858024551,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "d-wwei",
        "handle": "d-wwei",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10348457?v=4",
        "kind": "user",
        "linkedUserId": "kn7fdvk8bhx56qdxvrptnqfffn81nrpv"
    },
    "ownerHandle": "d-wwei",
    "skill": {
        "_creationTime": 1771858024551,
        "_id": "kd78f27s4yzdzjn09zb7cbfa5581psfb",
        "badges": [],
        "createdAt": 1771858024551,
        "displayName": "Local Task Runner",
        "latestVersionId": "k97796af16tebknwcemgev5s6d81phh4",
        "ownerUserId": "kn7fdvk8bhx56qdxvrptnqfffn81nrpv",
        "slug": "local-task-runner",
        "stats": {
            "comments": 0,
            "downloads": 431,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Executes Node.js code snippets or scripts locally with isolation, cleanup, and timeout, serving as a lightweight alternative to spawning subagents.",
        "tags": {
            "latest": "k97796af16tebknwcemgev5s6d81phh4"
        },
        "updatedAt": 1774326600054
    }
}