41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to do what it says (a DataPilot CLI) but its implementation logs the raw API credential to a local logfile and writes persistent logs without disclosing that in the SKILL.md, creatin...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772962982198,
        "_id": "k977jfjj12thfd56pfjafah5sd82gvsw",
        "changelog": "oceanbase-datapilot 1.0.1\n\n- Updated CLI usage examples in documentation to remove redundant --base-url and unify command formats.\n- Minor documentation refinements for clarity and consistency.\n- No changes to command set or APIs.",
        "changelogSource": "auto",
        "createdAt": 1772962982198,
        "parsed": {
            "clawdis": {
                "primaryEnv": "DATAPILOT_API_KEY",
                "requires": {
                    "bins": [
                        "node"
                    ],
                    "env": [
                        "DATAPILOT_API_URL",
                        "DATAPILOT_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "HSunboy",
        "handle": "hsunboy",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/14886044?v=4",
        "kind": "user",
        "linkedUserId": "kn7bjj17hcy9yyzmk0bg6wsyys82hecc"
    },
    "ownerHandle": "hsunboy",
    "skill": {
        "_creationTime": 1772958705188,
        "_id": "kd7enn4g675gcch72d75dftnns82h0sn",
        "badges": [],
        "createdAt": 1772958705188,
        "displayName": "datapilot",
        "latestVersionId": "k977jfjj12thfd56pfjafah5sd82gvsw",
        "ownerUserId": "kn7bjj17hcy9yyzmk0bg6wsyys82hecc",
        "slug": "oceanbase-datapilot",
        "stats": {
            "comments": 0,
            "downloads": 204,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "面向所有问数与数据分析场景，基于 DataPilot 的 OpenAPI 执行从数据源接入到数据问答的完整流程。用于自然语言查数、SQL 查询校验、图表生成、报告导出下载、创建与管理数据分析 Agent、维护 Agent 知识库。",
        "tags": {
            "latest": "k977jfjj12thfd56pfjafah5sd82gvsw"
        },
        "updatedAt": 1774330561895
    }
}