55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill largely does what it says (four scanners) but registry metadata and declared requirements are inconsistent with the code and docs — some declared 'required' secrets/tools are optional or unu...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773850310207,
        "_id": "k9713w0yavdj16ajg1wcxy8da9835rws",
        "changelog": "Declare third-party API secrets and telemetry in metadata; reword injection detection descriptions; add Security & Privacy section",
        "changelogSource": "user",
        "createdAt": 1773850310207,
        "parsed": {
            "clawdis": {
                "emoji": "🛡️",
                "homepage": "https:\/\/github.com\/mind-sec\/mind-security",
                "primaryEnv": "BITMIND_API_KEY",
                "requires": {
                    "anyBins": [
                        "curl",
                        "wget"
                    ],
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "BITMIND_API_KEY",
                        "GPTZERO_API_KEY",
                        "VIRUSTOTAL_API_KEY",
                        "URLSCAN_API_KEY",
                        "GOOGLE_SAFE_BROWSING_KEY"
                    ]
                }
            }
        },
        "version": "1.2.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Andrey Gruzdev",
        "handle": "canvinus",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/44225021?v=4",
        "kind": "user",
        "linkedUserId": "kn7fe1gntdrp8jcn51y3fqmebs82b7f9"
    },
    "ownerHandle": "canvinus",
    "skill": {
        "_creationTime": 1772811229128,
        "_id": "kd7ehtk42cy390ndz2g06vkyvx82dbd1",
        "badges": [],
        "createdAt": 1772811229128,
        "displayName": "Mind Security",
        "latestVersionId": "k9713w0yavdj16ajg1wcxy8da9835rws",
        "ownerUserId": "kn7fe1gntdrp8jcn51y3fqmebs82b7f9",
        "slug": "mind-security",
        "stats": {
            "comments": 0,
            "downloads": 250,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 3,
            "versions": 7
        },
        "summary": "AI security toolkit — deepfake detection, prompt injection scanning, malware\/phishing URL scanning, and AI text detection. Use when: (1) verifying if an imag...",
        "tags": {
            "latest": "k9713w0yavdj16ajg1wcxy8da9835rws"
        },
        "updatedAt": 1774330025568
    }
}