94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

Moltcops is internally consistent: a local, instruction-first security scanner that only reads files in a target folder and requires no credentials or installs — but review how you use it (don't scan ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770731788395,
        "_id": "k971qxa3tw6j0018tpjzcbznq980w4wg",
        "changelog": "MC-021: Hallucinated Package Reference (CRITICAL) - flags npx\/bunx\/dlx executing unverified packages. MC-025: HTML Comment Injection (CRITICAL) - detects executable commands hidden in HTML comments. MC-026: Unsafe Package Install (HIGH) - flags npm\/yarn\/pnpm install without --ignore-scripts. MC-027: Insecure Bind Address (HIGH) - catches 0.0.0.0 binding that exposes agents to public internet. All backed by real-world incidents from BitsecAI and SecurityScorecard STRIKE reports.",
        "changelogSource": "user",
        "createdAt": 1770731788395,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Adamthompson33",
        "handle": "adamthompson33",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/256450073?v=4",
        "kind": "user",
        "linkedUserId": "kn76yq92txn7ppnaf0krcqpqtd80t8ve"
    },
    "ownerHandle": "adamthompson33",
    "skill": {
        "_creationTime": 1770617644397,
        "_id": "kd7fea0tcqmbrwg4rjz67z9vyn80t402",
        "badges": [],
        "createdAt": 1770617644397,
        "displayName": "Moltcops",
        "latestVersionId": "k971qxa3tw6j0018tpjzcbznq980w4wg",
        "ownerUserId": "kn76yq92txn7ppnaf0krcqpqtd80t8ve",
        "slug": "moltcops",
        "stats": {
            "comments": 0,
            "downloads": 1101,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 4
        },
        "summary": "Pre-install security scanner for AI agent skills. Detects malicious patterns before you trust code. Local-first — code never leaves your machine.",
        "tags": {
            "latest": "k971qxa3tw6j0018tpjzcbznq980w4wg",
            "safety": "k974ee6gm4x1j7yvxt71t2svb980veys",
            "scanner": "k974ee6gm4x1j7yvxt71t2svb980veys",
            "security": "k974ee6gm4x1j7yvxt71t2svb980veys"
        },
        "updatedAt": 1772051740585
    }
}