41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement a Microsoft To Do CLI as described, but it contains a hard-coded Azure client credential (client_id/client_secret) baked into the package and a few documentation/test in...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770972049060,
        "_id": "k971g3g68nj9ycr47b594bsgkn8131p5",
        "changelog": "- Added _meta.json file for enhanced metadata support.\n- Introduced test_ms_todo_oauth.py at project root to streamline testing.\n- Removed obsolete test script from scripts directory.\n- Updated SKILL.md with simplified setup instructions (native venv usage) and removed references to the \"uv\" tool.\n- All commands and documentation now reference Python's built-in venv for installation and running the CLI.",
        "changelogSource": "auto",
        "createdAt": 1770972049060,
        "version": "1.0.4"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "nathanatgit",
        "handle": "nathanatgit",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/20399271?v=4",
        "kind": "user",
        "linkedUserId": "kn7bj2mgew08cqjenvy55tk5w980at96"
    },
    "ownerHandle": "nathanatgit",
    "skill": {
        "_creationTime": 1770964830963,
        "_id": "kd70qqspp2kdzqcv3ahq9jd2rx812yn3",
        "badges": [],
        "createdAt": 1770964830963,
        "displayName": "Ms Todo Oauth",
        "latestVersionId": "k971g3g68nj9ycr47b594bsgkn8131p5",
        "ownerUserId": "kn7bj2mgew08cqjenvy55tk5w980at96",
        "slug": "ms-todo-oauth",
        "stats": {
            "comments": 0,
            "downloads": 666,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 5
        },
        "summary": "A robust CLI skill to manage Microsoft To Do tasks via Microsoft Graph API. Supports full task lifecycle management including lists, tasks with priorities, due dates, reminders, recurrence patterns, views, search, and data export. Includes comprehensive test suite for reliability. THIS IS A REVISED OAUTH2-BASED VERSION OF ms-todo-sync with AI ASSISTANCE. ALL CREDITS TO THE ORIGINAL AUTHOR.",
        "tags": {
            "latest": "k971g3g68nj9ycr47b594bsgkn8131p5"
        },
        "updatedAt": 1774324483569
    }
}