41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and SKILL.md align with its stated Miro push purpose, but the registry metadata omits required environment variables (MIRO_ACCESS_TOKEN and MIRO_BOARD_ID), creating an incoherence you...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770885992671,
        "_id": "k979batek2z3vr571hg1gbr425811e77",
        "changelog": "Workshop → Miro Agent (OpenClaw Skill)\n\nTurn workshop whiteboard photos (or raw notes) into a clean, editable Miro diagram—with real containers (Frames), grouped stickies, and smart connectors—then push directly to Miro via API.\n\nWhat it does\n\nPhoto\/notes → structured diagram\n\nDetects logical “areas” (e.g., Product A, Product B, Easy Vision, Milestone) and creates Miro Frames as true containers.\n\nPlaces stickies inside the correct frame with a readable layout.\n\nClean relationships\n\nCreates connectors where they make sense.\n\nIf the diagram is clearly “container → container” (e.g., Product A → Product B), it creates a frame-to-frame flow (not random sticky-to-sticky arrows).\n\nPrevents messy arrows by avoiding cross-frame sticky connectors when a container-level flow is detected.\n\nNo duplicates (idempotent)\n\nUses a stable sessionKey + a runId.\n\nRe-running the same session replaces the previous run automatically.\n\nUndo \/ rollback\n\nAutomatic rollback if a run fails.\n\nManual undo per session with a single command.\n\nKey technical improvements\n\nBulletproof frame creation\n\nIf the AI output misses frames, the script auto-generates frames using:\n\nTitle stickies (e.g., “Product A”, “Product B”), or\n\nX-axis clustering (left\/right grouping) as fallback.\n\nFixed Miro parent-boundary errors\n\nCorrectly converts coordinates when parenting stickies into frames (avoids “position is outside parent boundaries”).\n\nArrow-only sticky filtering\n\nRemoves “→ \/ ->” as stickies (arrows are connectors, not post-its).\n\nHow it pushes to Miro\n\nUses only environment variables (no cookies, no browser session hacks):\n\nMIRO_ACCESS_TOKEN\n\nMIRO_BOARD_ID\n\nExecutes a local script:\n\nnode miro-push.mjs apply \n\nnode miro-push.mjs undo \n\nOutput format\n\nThe agent produces a Miro-ready JSON containing:\n\nframes[] (containers)\n\nstickies[] (notes inside frames)\n\nconnectors[] (relationships)\n\nmeta.sessionKey + meta.runId for idempotent updates\n\nBest for\n\nWorkshop facilitation\n\nArchitecture diagrams\n\nProduct mapping sessions\n\nBrainstorms that need to become clean, editable boards fast",
        "changelogSource": "user",
        "createdAt": 1770885992671,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Simone Ferrario",
        "handle": "simoneferrario",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/79698543?v=4",
        "kind": "user",
        "linkedUserId": "kn76ahyxpjk052pvyvhaajhgbs811tmr"
    },
    "ownerHandle": "simoneferrario",
    "skill": {
        "_creationTime": 1770885992671,
        "_id": "kd7d9ts1hpckcrfmthq8296cv1810sdg",
        "badges": [],
        "createdAt": 1770885992671,
        "displayName": "Miro board",
        "latestVersionId": "k979batek2z3vr571hg1gbr425811e77",
        "ownerUserId": "kn76ahyxpjk052pvyvhaajhgbs811tmr",
        "slug": "miro-workshop-assistant",
        "stats": {
            "comments": 0,
            "downloads": 663,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Workshop photos\/notes -> an editable Miro diagram (real FRAMES as containers + stickies + connectors) with idempotent dedupe, rollback, undo and change commands, using the local script miro-push.mjs and env vars.",
        "tags": {
            "latest": "k979batek2z3vr571hg1gbr425811e77"
        },
        "updatedAt": 1774324288800
    }
}