59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (local security audit) mostly matches its instructions, but important inconsistencies — notably reliance on npx (which will fetch remote code) while claiming 'runs entirely ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771523378611,
        "_id": "k9741rg7b6s341re7ta1kt1ey981ffe8",
        "changelog": "Initial release of opena2a-security for OpenClaw.\n\n- Adds local security auditing and hardening with no external API calls.\n- Scans configurations, installed skills, and credentials for vulnerabilities and exposures, including CVE-2026-25253.\n- Detects malicious skill code, supply chain risks, and improper credential handling.\n- Provides actionable security recommendations tailored to your setup.\n- Outputs results in multiple formats (text, json, sarif, html, asp).\n- Documentation includes step-by-step run instructions and guidance for both users and skill publishers.",
        "changelogSource": "user",
        "createdAt": 1771523378611,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Abdel Fane",
        "handle": "abdelsfane",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32418586?v=4",
        "kind": "user",
        "linkedUserId": "kn79hn2cv05nytscka6136zhn181ekgv"
    },
    "ownerHandle": "abdelsfane",
    "skill": {
        "_creationTime": 1771523378611,
        "_id": "kd7btxdncr3sb6f95ywrw2w38n81e12x",
        "badges": [],
        "createdAt": 1771523378611,
        "displayName": "OpenA2A Security",
        "latestVersionId": "k9741rg7b6s341re7ta1kt1ey981ffe8",
        "ownerUserId": "kn79hn2cv05nytscka6136zhn181ekgv",
        "slug": "opena2a-security",
        "stats": {
            "comments": 0,
            "downloads": 399,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Security hardening for OpenClaw. Audit your configuration, scan installed skills for malware, detect CVE-2026-25253, check credential exposure, and get actio...",
        "tags": {
            "latest": "k9741rg7b6s341re7ta1kt1ey981ffe8"
        },
        "updatedAt": 1772057735892
    }
}