65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's behavior mostly matches its stated purpose (interacting with NeoDB) but the package metadata omits required credentials and the included auth script writes sensitive tokens/ client secrets...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774685955504,
        "_id": "k978s3w4nfx9g3rzt2kwwe92xd83r28y",
        "changelog": "Initial release: search, mark, rate, review books, movies, music, games on NeoDB via API",
        "changelogSource": "user",
        "createdAt": 1774685955504,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s179ehsg1g3v1461b59fryjze183sd2r",
        "displayName": "Eric Yu",
        "handle": "gitnapp",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/41632082?v=4",
        "kind": "user",
        "linkedUserId": "kn71wmfxxkq6cmb0696vdrvkc581z8y9"
    },
    "ownerHandle": "gitnapp",
    "skill": {
        "_creationTime": 1774685955504,
        "_id": "kd76jhzzrhsse0hp5mf8q0xcv983r2dk",
        "badges": [],
        "createdAt": 1774685955504,
        "displayName": "NeoDB",
        "latestVersionId": "k978s3w4nfx9g3rzt2kwwe92xd83r28y",
        "ownerPublisherId": "s179ehsg1g3v1461b59fryjze183sd2r",
        "ownerUserId": "kn71wmfxxkq6cmb0696vdrvkc581z8y9",
        "slug": "neodb",
        "stats": {
            "comments": 0,
            "downloads": 17,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "NeoDB 书影音标注助手 — 通过 API 替代网页\/客户端完成所有 NeoDB 操作。支持搜索条目、标记（想看\/在看\/看过\/放弃）、评分、短评、长评、笔记、收藏单、标签管理。触发场景：(1) 用户提到 NeoDB、书影音、标记、想看、看过、在读、读完、评分、评论 (2) 用户要搜索\/标注书籍、电影、剧集、音乐...",
        "tags": {
            "latest": "k978s3w4nfx9g3rzt2kwwe92xd83r28y"
        },
        "updatedAt": 1774686411359
    }
}