65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's described purpose (adding OAuth PKCE to an MCP server) matches the instructions, but the SKILL.md expects Redis, runtime env vars, and dependencies (mcp-handler, Next.js conventions, upstr...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773963160341,
        "_id": "k97cvj18tdy73b9y7459ft7sh58365vy",
        "changelog": "- Initial release of mcp-oauth, providing OAuth 2.0 PKCE authentication for remote MCP servers.\n- Implements OAuth discovery, dynamic client registration, authorization endpoint, token exchange, and refresh flows as per MCP authorization spec.\n- Includes code samples for Next.js server routes to enable:\n  - Standards-based OAuth discovery and protected resource metadata endpoints.\n  - Dynamic client registration (RFC 7591).\n  - Secure authorization and callback logic for integrating with upstream OAuth services.\n  - Protects MCP endpoints and tools with user-level token-based access.\n- Designed to trigger for any user request regarding adding authentication or OAuth to an MCP server.",
        "changelogSource": "auto",
        "createdAt": 1773963160341,
        "parsed": {
            "clawdis": {
                "emoji": "🔒",
                "homepage": "https:\/\/github.com\/lucaperret\/agent-skills"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Luca",
        "handle": "lucaperret",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1887122?v=4",
        "kind": "user",
        "linkedUserId": "kn76qgcyqfzadfx73566ekfmm181b375"
    },
    "ownerHandle": "lucaperret",
    "skill": {
        "_creationTime": 1773963160341,
        "_id": "kd71j910sy1k459dqgnc436yxn8363mm",
        "badges": [],
        "createdAt": 1773963160341,
        "displayName": "MCP OAuth",
        "latestVersionId": "k97cvj18tdy73b9y7459ft7sh58365vy",
        "ownerUserId": "kn76qgcyqfzadfx73566ekfmm181b375",
        "slug": "mcp-oauth",
        "stats": {
            "comments": 0,
            "downloads": 37,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Add OAuth 2.0 PKCE authentication to a remote MCP server. Use this skill whenever the user wants to add authentication to an MCP server, protect MCP tools wi...",
        "tags": {
            "latest": "k97cvj18tdy73b9y7459ft7sh58365vy"
        },
        "updatedAt": 1773964010570
    }
}