65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's purpose and instructions match (looking up live docs), but it runs an npm package via npx at runtime which executes remote code and the package namespace/ownership is not clearly tied to t...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774620145831,
        "_id": "k972f73gfkw668mf8rjsy6vx2d83qrxt",
        "changelog": "Initial release of Morrow Context7 docs skill.",
        "changelogSource": "user",
        "createdAt": 1774620145831,
        "parsed": {
            "clawdis": {
                "emoji": "📚",
                "homepage": "https:\/\/context7.com",
                "requires": {
                    "bins": [
                        "npx"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1733pb2c7hr8wz3t3mq2gqg0583q244",
        "displayName": "TimesAndPlaces",
        "handle": "timesandplaces",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/56364681?v=4",
        "kind": "user",
        "linkedUserId": "kn70xaysn3n9aavmqmj4y3x0k983phyp"
    },
    "ownerHandle": "timesandplaces",
    "skill": {
        "_creationTime": 1774620145831,
        "_id": "kd75zy8qfw8fh16djreysw0x7583q862",
        "badges": [],
        "createdAt": 1774620145831,
        "displayName": "Morrow Context7",
        "latestVersionId": "k972f73gfkw668mf8rjsy6vx2d83qrxt",
        "ownerPublisherId": "s1733pb2c7hr8wz3t3mq2gqg0583q244",
        "ownerUserId": "kn70xaysn3n9aavmqmj4y3x0k983phyp",
        "slug": "morrow-context7",
        "stats": {
            "comments": 0,
            "downloads": 23,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Look up current, accurate documentation and code examples for any library or framework using context7-mcp. Use when an agent needs to know how to use a libra...",
        "tags": {
            "latest": "k972f73gfkw668mf8rjsy6vx2d83qrxt"
        },
        "updatedAt": 1774620419760
    }
}