41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The SKILL.md claims a local scanner that blocks installs and runs persistent monitors, but the skill package contains no code or install spec while instructing the user to run/cron/wrap system command...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769854524668,
        "_id": "k976sc47ba70d5rxsxtmhkzbx5809c2c",
        "changelog": "Initial public release of Security Skill Scanner.\n\n- Scans ClawdHub skills for suspicious patterns such as credential theft, command injection, and network exfiltration.\n- Manages skill whitelists to reduce false positives and allow trusted skills.\n- Monitors Moltbook for emerging security discussions and scam alerts.\n- Generates and tracks permission manifests with Isnad chains.\n- Provides daily automated scanning and reporting in both markdown and JSON formats.\n- Includes pre-install hooks to automatically scan and block suspicious skills during installation, with force override option.\n- Offers command-line scripts for scanning, whitelist management, and Moltbook monitoring.",
        "changelogSource": "auto",
        "createdAt": 1769854524668,
        "parsed": {
            "clawdis": {
                "emoji": "🔒"
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "digitaladaption",
        "handle": "digitaladaption",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/203365024?v=4",
        "kind": "user",
        "linkedUserId": "kn72brka8q306dgb5verz8cq1s7znn0k"
    },
    "ownerHandle": "digitaladaption",
    "skill": {
        "_creationTime": 1769854524668,
        "_id": "kd7fwqhr3kh8daswg6tp213qfn809jv2",
        "createdAt": 1769854524668,
        "displayName": "Security Skill Scanner",
        "latestVersionId": "k976sc47ba70d5rxsxtmhkzbx5809c2c",
        "ownerUserId": "kn72brka8q306dgb5verz8cq1s7znn0k",
        "slug": "openclaw-skills-security-checker",
        "stats": {
            "comments": 0,
            "downloads": 2116,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 4,
            "versions": 1
        },
        "summary": "Security scanner for ClawdHub skills - detects suspicious patterns, manages whitelists, and monitors Moltbook for security threats.",
        "tags": {
            "latest": "k976sc47ba70d5rxsxtmhkzbx5809c2c"
        },
        "updatedAt": 1774321849566
    }
}