65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill is mostly coherent for scanning npm packages, but small inconsistencies (mandatory binaries that may be unnecessary and references to missing resources/other package managers) mean you shoul...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773842061948,
        "_id": "k9721ahzdq3xrehz2ejbcjma1x834k17",
        "changelog": "Initial release of NPM Package Scanner.\n\n- Scans npm packages in a repository for risk, maintenance issues, and upgrade concerns.\n- Analyzes package manifests, lockfiles, and workspace configurations.\n- Identifies risky, stale, or unnecessary dependencies and semver issues.\n- Runs audit commands for npm, bun, pnpm, and yarn when available.\n- Provides a structured summary of findings and actionable recommendations.",
        "changelogSource": "user",
        "createdAt": 1773842061948,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "rg",
                        "jq",
                        "bun",
                        "npm"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "geoffrey-xiao",
        "handle": "geoffrey-xiao",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/65010344?v=4",
        "kind": "user",
        "linkedUserId": "kn7dq8eaeanfbthd00qfv3gc29833ccj"
    },
    "ownerHandle": "geoffrey-xiao",
    "skill": {
        "_creationTime": 1773842061948,
        "_id": "kd7cqpjtmtx1rx4t42h28mn6jd834se5",
        "badges": [],
        "createdAt": 1773842061948,
        "displayName": "NPM Package Scanner",
        "latestVersionId": "k9721ahzdq3xrehz2ejbcjma1x834k17",
        "ownerUserId": "kn7dq8eaeanfbthd00qfv3gc29833ccj",
        "slug": "npm-package-scan",
        "stats": {
            "comments": 0,
            "downloads": 46,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Scan npm packages used in a repository for risk, maintenance health, and upgrade concerns.",
        "tags": {
            "latest": "k9721ahzdq3xrehz2ejbcjma1x834k17"
        },
        "updatedAt": 1774337290628
    }
}