37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's claimed purpose (IMAP/SMTP + OKKI integration) matches most of its code, but there are multiple inconsistencies and overreaches — notably undeclared credential usage, .env access outside t...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration (+1 more)

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774751423839,
        "_id": "k97ccxrree6ddqkqeehrjrvw4583v4w1",
        "changelog": "修复：移除 .env.example 中的敏感信息（邮箱地址和路径），使用占位符",
        "changelogSource": "user",
        "createdAt": 1774751423839,
        "parsed": {
            "clawdis": {
                "emoji": "📧",
                "primaryEnv": "SMTP_PASS",
                "requires": {
                    "bins": [
                        "node",
                        "npm",
                        "python3"
                    ],
                    "env": [
                        "IMAP_HOST",
                        "IMAP_USER",
                        "IMAP_PASS",
                        "SMTP_HOST",
                        "SMTP_USER",
                        "SMTP_PASS",
                        "OKKI_CLI_PATH",
                        "VECTOR_SEARCH_PATH"
                    ]
                }
            }
        },
        "version": "2.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17c8f5qp6wpzyxcf0v2588kmd83qzw7",
        "displayName": "Jaden's built a claw",
        "handle": "cjboy007",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/64246343?v=4",
        "kind": "user",
        "linkedUserId": "kn7atpgm55z93tb0mh3mg4e3h18272cn"
    },
    "ownerHandle": "cjboy007",
    "skill": {
        "_creationTime": 1774700192653,
        "_id": "kd7dhjcdp333hfjk256jpepxe983rx3n",
        "badges": [],
        "createdAt": 1774700192653,
        "displayName": "Okki Sync Mail",
        "latestVersionId": "k97ccxrree6ddqkqeehrjrvw4583v4w1",
        "ownerPublisherId": "s17c8f5qp6wpzyxcf0v2588kmd83qzw7",
        "ownerUserId": "kn7atpgm55z93tb0mh3mg4e3h18272cn",
        "slug": "okki-sync-mail",
        "stats": {
            "comments": 0,
            "downloads": 23,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "完整的邮件自动化解决方案，集成 OKKI CRM。支持 IMAP 邮件自动捕获、SMTP 发送邮件、dry-run 模式、发送日志、速率限制、定时发送、签名模板、邮件规则、连接池优化、邮件转发等功能。自动同步 inbound\/outbound 邮件到 OKKI 创建跟进记录（remark_type=102）。",
        "tags": {
            "latest": "k97ccxrree6ddqkqeehrjrvw4583v4w1"
        },
        "updatedAt": 1774751812109
    }
}