47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill code does what the description says (web search + image understanding) but it embeds a hard-coded MiniMax API key/host and overrides environment variables, which is disproportionate and risk...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773847275909,
        "_id": "k97d6j8mpekfn0qy1qdawef38d834rf6",
        "changelog": "Version 1.2.0\n\n- 新增中文文档，详细说明了搜索与图像理解两大功能。\n- 提供典型命令行用法示例，涵盖图片描述、文字提取、内容分析。\n- 明确支持图片格式：JPEG、PNG、WebP。\n- 列出了依赖项与 API Key 设置要点。\n- 指明各脚本功能和触发词。",
        "changelogSource": "auto",
        "createdAt": 1773847275909,
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "镜子",
        "handle": "mirrorpromax",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/51259226?v=4",
        "kind": "user",
        "linkedUserId": "kn7a5sawf8gps26sx7bxa7m2h181yrht"
    },
    "ownerHandle": "mirrorpromax",
    "skill": {
        "_creationTime": 1773847275909,
        "_id": "kd74hvdq3ggppcycr6g730dvqx835jy2",
        "badges": [],
        "createdAt": 1773847275909,
        "displayName": "Minimax Cp",
        "latestVersionId": "k97d6j8mpekfn0qy1qdawef38d834rf6",
        "ownerUserId": "kn7a5sawf8gps26sx7bxa7m2h181yrht",
        "slug": "minimax-cp",
        "stats": {
            "comments": 0,
            "downloads": 50,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "使用 MiniMax Coding Plan API 进行网页搜索和图像理解。当用户要求搜索信息、查找资料、或者询问实时内容时使用搜索功能；当用户要求识图、分析图片、描述图片内容时使用 understand_image 功能。触发词：搜索、查找、search、look up、识图、分析图片、图片里是什么",
        "tags": {
            "latest": "k97d6j8mpekfn0qy1qdawef38d834rf6"
        },
        "updatedAt": 1774337342541
    }
}