46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The package mostly matches a node-to-hub registration tool, but the registry metadata (no env vars / instruction-only) contradicts the included code and required secrets; the skill also scans user hom...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774589114201,
        "_id": "k97bs7r3x1p8xazww8wp660pk983q813",
        "changelog": "Version 1.0.10\n\n- No file changes detected in this release.\n- Documentation, code, and functionality remain unchanged from the previous version.",
        "changelogSource": "user",
        "createdAt": 1774589114201,
        "version": "1.0.10"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175xj198rm3z5erf3rhe7tszh83hytd",
        "displayName": "Scarlett_AI",
        "handle": "ai-scarlett",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/264102358?v=4",
        "kind": "user",
        "linkedUserId": "kn71jc0b4386d854hjekv6w74d81xwjv"
    },
    "ownerHandle": "ai-scarlett",
    "skill": {
        "_creationTime": 1774324232525,
        "_id": "kd7610thtkjs8xd7vcr3aw4m5583gyxn",
        "badges": [],
        "createdAt": 1774324232525,
        "displayName": "openclaw-connect子节点专用skill",
        "latestVersionId": "k97bs7r3x1p8xazww8wp660pk983q813",
        "ownerPublisherId": "s175xj198rm3z5erf3rhe7tszh83hytd",
        "ownerUserId": "kn71jc0b4386d854hjekv6w74d81xwjv",
        "slug": "openclaw-connect-node",
        "stats": {
            "comments": 0,
            "downloads": 149,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 11
        },
        "summary": "OpenClaw Connect Enterprise 子节点。将当前 OpenClaw 实例注册为远程 Hub 的子节点，通过 appId\/key\/token 三重验证绑定。提供本地管理界面（任务查看、记忆管理、系统监控）。子节点只能看自己的数据，所有被主节点控制的数据不可操作。当用户说\"连接主节点\"、\"注册子...",
        "tags": {
            "latest": "k97bs7r3x1p8xazww8wp660pk983q813"
        },
        "updatedAt": 1774589167095
    }
}