37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code mostly matches the stated purpose (managing New API tokens and safely injecting/copying keys), but there are inconsistent instructions and undeclared secrets access (the scripts requi...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773476984875,
        "_id": "k97e2pf3kp46fgb0v9y8k1b0qn82xcfb",
        "changelog": "Version 0.1.1\n\n- Updated \"Security Constraints\" section to \"Security Guidelines\" with clearer, more accessible language.\n- Added clarifications on the limitations of `scan-config` and best-effort secret redaction.\n- Reorganized and simplified security guidance for improved readability.\n- No changes to commands, actions, or file structure.",
        "changelogSource": "user",
        "createdAt": 1773476984875,
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Calcium-Ion",
        "handle": "calcium-ion",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/61247483?v=4",
        "kind": "user",
        "linkedUserId": "kn7fqrg03p9t6b782r1c7c393x82sfqh"
    },
    "ownerHandle": "calcium-ion",
    "skill": {
        "_creationTime": 1773303986960,
        "_id": "kd76950ms24mnd09zwgqdgwdfh82rars",
        "badges": [],
        "createdAt": 1773303986960,
        "displayName": "NewAPI",
        "latestVersionId": "k97e2pf3kp46fgb0v9y8k1b0qn82xcfb",
        "ownerUserId": "kn7fqrg03p9t6b782r1c7c393x82sfqh",
        "slug": "newapi",
        "stats": {
            "comments": 0,
            "downloads": 166,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Assistant for newapi (new-api), an open-source unified AI gateway platform (https:\/\/github.com\/QuantumNous\/new-api). Use when the user asks about New API, ma...",
        "tags": {
            "latest": "k97e2pf3kp46fgb0v9y8k1b0qn82xcfb"
        },
        "updatedAt": 1774332407817
    }
}