47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (an AI security scanner) is plausible, but its runtime instructions ask you to fetch and run code from an external GitHub repo and reference integrations (ClamAV, Telegram, ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773515187492,
        "_id": "k975bqm711h2hjszts1gz9zg6n82xc72",
        "changelog": "OpenClaw Shield 1.0.0 initial release:\n\n- Enterprise-grade security scanner for AI agents.\n- Provides static code analysis to detect credential theft, data exfiltration, and malicious operations.\n- Includes runtime guard for real-time protection with allowlists, output sanitization, and policy enforcement.\n- Integrates ClamAV for signature-based malware detection and Telegram for alerting.\n- Features hash-chained, tamper-evident audit logging and detailed reporting.\n- Ready for daily automated scans and manual audit workflows.",
        "changelogSource": "auto",
        "createdAt": 1773515187492,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "kenswj",
        "handle": "kenswj",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/29836387?v=4",
        "kind": "user",
        "linkedUserId": "kn7353540ppfrvvkgpjyf0n2gx82w5mm"
    },
    "ownerHandle": "kenswj",
    "skill": {
        "_creationTime": 1773515187492,
        "_id": "kd7ex7rm75d386rxp4zm4m3g6s82wbtp",
        "badges": [],
        "createdAt": 1773515187492,
        "displayName": "Openclaw Shield 1.0.3",
        "latestVersionId": "k975bqm711h2hjszts1gz9zg6n82xc72",
        "ownerUserId": "kn7353540ppfrvvkgpjyf0n2gx82w5mm",
        "slug": "openclaw-shield-1-0-3",
        "stats": {
            "comments": 0,
            "downloads": 121,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Enterprise AI security scanner combining static code analysis, runtime guards, ClamAV integration, and tamper-proof audit logging to detect threats and enfor...",
        "tags": {
            "latest": "k975bqm711h2hjszts1gz9zg6n82xc72"
        },
        "updatedAt": 1774333785023
    }
}