90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill's code, runtime instructions, and optional environment variables are coherent with an open-source CVE scanning/reporting tool — nothing requests unrelated credentials or surprising installs ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dynamic_code_execution

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773474418466,
        "_id": "k97fwa6qf0zjk1y4s04re1wsq182wfgv",
        "changelog": "open-cve-scanner 1.0.1\n\n- Added large-scale accuracy testing pipeline, including scripts for generating ~1000 test cases, batch scanning, ground truth building, and verification.\n- Introduced new utility and matching modules to improve version detection, matching reliability, and ecosystem analysis.\n- Documentation updates: Added details and instructions for running the new accuracy test pipeline and interpreting results.\n- Expanded and modularized the codebase for testability, future improvements, and research on CVE detection precision.\n- Removed obsolete top-level cve-scanner file as part of refactoring.",
        "changelogSource": "auto",
        "createdAt": 1773474418466,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "rebugui",
        "handle": "rebugui",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/51498462?v=4",
        "kind": "user",
        "linkedUserId": "kn78x8y0ccnbk3re9kbpbetkad82j8bz"
    },
    "ownerHandle": "rebugui",
    "skill": {
        "_creationTime": 1773094361901,
        "_id": "kd7dxay3nwmg9a4vvmp8800pmh82j572",
        "badges": [],
        "createdAt": 1773094361901,
        "displayName": "Open Cve Scanner",
        "latestVersionId": "k97fwa6qf0zjk1y4s04re1wsq182wfgv",
        "ownerUserId": "kn78x8y0ccnbk3re9kbpbetkad82j8bz",
        "slug": "open-cve-scanner",
        "stats": {
            "comments": 0,
            "downloads": 182,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 2
        },
        "summary": "오픈소스 취약점 분석 스킬. 사용자가 오픈소스 패키지 이름과 사용 중인 버전을 입력하면, NVD(NIST), OSV.dev(Google), GitHub Advisory 3개 데이터 소스에서 CVE 취약점을 조회하여 최신 버전 정보와 함께 보안 리포트를 생성한다. 마크다운, Exce...",
        "tags": {
            "latest": "k97fwa6qf0zjk1y4s04re1wsq182wfgv"
        },
        "updatedAt": 1774331081797
    }
}