47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's code contains hardcoded Longbridge API credentials and JWTs despite the SKILL.md instructing secure secret configuration and declaring no required credentials, creating a clear mismatch an...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774131202466,
        "_id": "k971q6fmc002qcmg45nn2kknfx83a0a5",
        "changelog": "Initial release: stock trade management for Longbridge",
        "changelogSource": "user",
        "createdAt": 1774131202466,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "canonxu",
        "handle": "canonxu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7338324?v=4",
        "kind": "user",
        "linkedUserId": "kn7cnsvb0dyhrr8rpbpcbzg50h82t0ws"
    },
    "ownerHandle": "canonxu",
    "skill": {
        "_creationTime": 1774131202466,
        "_id": "kd76srq778ca65s80ns09evke183bw0b",
        "badges": [],
        "createdAt": 1774131202466,
        "displayName": "My Stock Longbridge Skill",
        "latestVersionId": "k971q6fmc002qcmg45nn2kknfx83a0a5",
        "ownerUserId": "kn7cnsvb0dyhrr8rpbpcbzg50h82t0ws",
        "slug": "my-stock-longbridge-skill",
        "stats": {
            "comments": 0,
            "downloads": 26,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Integrates Longbridge OpenAPI for automated stock trading, market quotes, account tracking, and real-time streaming via secure credentials.",
        "tags": {
            "latest": "k971q6fmc002qcmg45nn2kknfx83a0a5"
        },
        "updatedAt": 1774132007312
    }
}