47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's declared requirements (none) don't match its runtime instructions and code: it downloads and extracts npm packages, runs the provided MCP command (which executes arbitrary code), and reads...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773814153056,
        "_id": "k97dy8swvhzcteajzwe6wzxv7n834pm6",
        "changelog": "mcp-to-skill v1.0.0\n\n- Introduces a tool for converting any MCP server into a standalone skill package with zero runtime dependencies.\n- Guides users through extracting tool schemas, analyzing code or documentation, and generating a ready-to-use skill—no MCP process required.\n- Provides configurable language support for generated files.\n- Ensures secrets safety by separating public config and sensitive credentials.\n- Supports auto-registration with popular AI agent frameworks, with fallback to manual instructions.\n- Optionally prompts users to remove the original MCP configuration after conversion.",
        "changelogSource": "user",
        "createdAt": 1773814153056,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "JalanChao",
        "handle": "jalanchao",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/92440201?v=4",
        "kind": "user",
        "linkedUserId": "kn7e9p2sfpsgagn8bh8vg1ejm182ty73"
    },
    "ownerHandle": "jalanchao",
    "skill": {
        "_creationTime": 1773814153056,
        "_id": "kd76evv5my66h5ghg4s7rs20y9835bbd",
        "badges": [],
        "createdAt": 1773814153056,
        "displayName": "mcp-to-skill",
        "latestVersionId": "k97dy8swvhzcteajzwe6wzxv7n834pm6",
        "ownerUserId": "kn7e9p2sfpsgagn8bh8vg1ejm182ty73",
        "slug": "mcp-to-skill",
        "stats": {
            "comments": 0,
            "downloads": 55,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Converts any MCP server into a standalone skill package with zero runtime dependencies (no MCP process required). Trigger when user says: \"convert this MCP t...",
        "tags": {
            "latest": "k97dy8swvhzcteajzwe6wzxv7n834pm6"
        },
        "updatedAt": 1774336897119
    }
}