41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions match its stated goal (installing tools to access many platforms) but ask for sensitive credentials (browser cookies, API keys), instruct installing a third‑party package from...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772803584348,
        "_id": "k970zqhhxv1c73w1s96rc145as82cyyf",
        "changelog": "Initial release of agent-reach: one-command install & configuration for upstream data tools.\n\n- Supports setup\/config for Twitter\/X, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu, Douyin, LinkedIn, Boss直聘, WeChat (公众号), RSS, and any web page.\n- Provides clear usage rules—keeps user workspace clean by using ~\/.agent-reach and \/tmp\/.\n- Includes detailed setup, configuration, and troubleshooting instructions (cookies, proxies, human steps).\n- Lets you call upstream tools (xreach, yt-dlp, mcporter, gh, curl, etc.) directly after install—no wrappers.\n- Contains common command examples for each platform and links to browser extensions for cookie import.",
        "changelogSource": "auto",
        "createdAt": 1772803584348,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jiangwzh",
        "handle": "jiangwzh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/125803223?v=4",
        "kind": "user",
        "linkedUserId": "kn7b0ah2x1vmnvr3hahh7pvqtn82cqs4"
    },
    "ownerHandle": "jiangwzh",
    "skill": {
        "_creationTime": 1772803584348,
        "_id": "kd7br8prfspeaq29677amr392d82c3p1",
        "badges": [],
        "createdAt": 1772803584348,
        "displayName": "Moss Skill-9",
        "latestVersionId": "k970zqhhxv1c73w1s96rc145as82cyyf",
        "ownerUserId": "kn7b0ah2x1vmnvr3hahh7pvqtn82cqs4",
        "slug": "moss-skill-9",
        "stats": {
            "comments": 0,
            "downloads": 188,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Give your AI agent eyes to see the entire internet. Install and configure upstream tools for Twitter\/X, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu, Douyi...",
        "tags": {
            "latest": "k970zqhhxv1c73w1s96rc145as82cyyf"
        },
        "updatedAt": 1774329991183
    }
}