41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it claims (creates an Nginx conf and reloads via Docker), but there are safety and scope concerns (no input sanitization, possible path traversal/overwrite, and minor metada...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770369379611,
        "_id": "k9718y26pqsztd07z6y72j4jcs80mpqq",
        "changelog": "Security fix: Anonymized all examples in SKILL.md to remove private information.",
        "changelogSource": "user",
        "createdAt": 1770369379611,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "bash",
                        "docker"
                    ]
                }
            }
        },
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "xieyuanqing",
        "handle": "xieyuanqing",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/43878017?v=4",
        "kind": "user",
        "linkedUserId": "kn7ctbmjbktz9jnm18bpv641t980m3hd"
    },
    "ownerHandle": "xieyuanqing",
    "skill": {
        "_creationTime": 1770368508059,
        "_id": "kd7f9s8acwd65pkfp5mrqa2fnd80n69q",
        "badges": [],
        "createdAt": 1770368508059,
        "displayName": "Nginx Config Creator",
        "latestVersionId": "k9718y26pqsztd07z6y72j4jcs80mpqq",
        "ownerUserId": "kn7ctbmjbktz9jnm18bpv641t980m3hd",
        "slug": "nginx-config-creator",
        "stats": {
            "comments": 0,
            "downloads": 1630,
            "installsAllTime": 7,
            "installsCurrent": 7,
            "stars": 0,
            "versions": 2
        },
        "summary": "Creates a standard Nginx\/OpenResty reverse proxy config file for a service and reloads the web server. Features safety checks and environment awareness. Takes service name, domain, and port as main arguments.",
        "tags": {
            "latest": "k9718y26pqsztd07z6y72j4jcs80mpqq"
        },
        "updatedAt": 1774322994214
    }
}