47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's code and docs consistently implement a PDF -> remote MoDora server flow that uploads a user-owned settings.json containing model endpoints and API keys (with an explicit consent guard), bu...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774673245917,
        "_id": "k97bfbsnh89x8hpab2as013wch83swdg",
        "changelog": "Declare OpenClaw credential metadata, move credentials to environment variables and headers, require HTTPS for remote endpoints, and reject secrets in settings files.",
        "changelogSource": "user",
        "createdAt": 1774673245917,
        "parsed": {
            "clawdis": {
                "primaryEnv": "MODORA_USER_API_KEY",
                "requires": {
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "MODORA_BASE_URL",
                        "MODORA_USER_API_KEY",
                        "MODORA_USER_ENDPOINT",
                        "MODORA_USER_MODEL"
                    ]
                }
            }
        },
        "version": "0.1.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s170bfqwae6mtf922jhz299q7s83jb0h",
        "displayName": "wu-uk",
        "handle": "wu-uk",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/199610473?v=4",
        "kind": "user",
        "linkedUserId": "kn7266wbf2xvnf7bpy41wxr45x831kzg"
    },
    "ownerHandle": "wu-uk",
    "skill": {
        "_creationTime": 1773633542124,
        "_id": "kd7bmv8tf3ss0h7m8rbahm95b9830cdc",
        "badges": [],
        "createdAt": 1773633542124,
        "displayName": "modora",
        "latestVersionId": "k97bfbsnh89x8hpab2as013wch83swdg",
        "ownerPublisherId": "s170bfqwae6mtf922jhz299q7s83jb0h",
        "ownerUserId": "kn7266wbf2xvnf7bpy41wxr45x831kzg",
        "slug": "modora-http",
        "stats": {
            "comments": 0,
            "downloads": 122,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "Use this skill to analyze PDFs with a remote MoDora HTTP service. Credentials are managed through declared environment variables and are not stored in the se...",
        "tags": {
            "latest": "k97bfbsnh89x8hpab2as013wch83swdg"
        },
        "updatedAt": 1774673271014
    }
}