47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it claims (bridges OpenClaw to Manus) but has inconsistent metadata and a concrete download-safety gap in the slides converter that contradicts the stated security model.

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773592322867,
        "_id": "k97fr5sds58f9e7b6cbaxvj8b182zq2r",
        "changelog": "Version 1.0.2\n\n- Added skill metadata fields: version, requires, config, external_services, and security_notes.\n- Explicitly require both MANUS_API_KEY and MANUS_API_BASE in configuration, with base URL restricted to HTTPS.\n- Enhanced security notes: download redirects are now revalidated and no secrets are bundled with the skill package.\n- Improved documentation to clarify required environment variables and stricter setup steps.",
        "changelogSource": "user",
        "createdAt": 1773592322867,
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "t0nyren",
        "handle": "t0nyren",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5243102?v=4",
        "kind": "user",
        "linkedUserId": "kn70hs0k3806d6a3ffa41v9e4182z3yk"
    },
    "ownerHandle": "t0nyren",
    "skill": {
        "_creationTime": 1773590815220,
        "_id": "kd7ejz2hxf3bfwe6r6dw8rgxxn82zjcv",
        "badges": [],
        "createdAt": 1773590815220,
        "displayName": "Manus on OpenClaw",
        "latestVersionId": "k97fr5sds58f9e7b6cbaxvj8b182zq2r",
        "ownerUserId": "kn70hs0k3806d6a3ffa41v9e4182z3yk",
        "slug": "manus-openclaw-bridge",
        "stats": {
            "comments": 0,
            "downloads": 124,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Connect OpenClaw to Manus task APIs for chat-driven image generation, document\/slides jobs, task polling, output collection, and messaging-surface return flows.",
        "tags": {
            "latest": "k97fr5sds58f9e7b6cbaxvj8b182zq2r"
        },
        "updatedAt": 1774334429753
    }
}