47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The package generally implements a local WebUI model-switcher, but the documentation and code disagree about how API keys are handled and the backend can write sensitive files and run system commands ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774298220444,
        "_id": "k975jhct6x49h47e11ksy9kxms83f4r0",
        "changelog": "OpenClaw Model Switcher 0.1.0 – Initial Release\n\n- Provides a WebUI for managing and switching between AI model providers quickly.\n- Features include a saved list of model configurations, one-click switching, batch import, provider filtering, and API key memory via browser localStorage.\n- Built-in presets for Aliyun, Volcano Engine, Kimi, DeepSeek, OpenAI, MiniMax, and more.\n- Triggered by natural language phrases such as \"切换模型\" or \"切换到 deepseek 模型\".\n- FastAPI backend (on port 9131) with a Vue 3 frontend; also supports command-line quick switching via Python script.\n- Ensures security by storing API keys only locally and never uploading them to servers.",
        "changelogSource": "auto",
        "createdAt": 1774298220444,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17ctzydrcsq9aggvmca4daqz183fxdg",
        "displayName": "左小空空",
        "handle": "peter-zx",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10544948?v=4",
        "kind": "user",
        "linkedUserId": "kn70rh2kxzkygcsqjf4e155gcd809v0v"
    },
    "ownerHandle": "peter-zx",
    "skill": {
        "_creationTime": 1774298220444,
        "_id": "kd7c505xjg5g9g9p1g1e3xafxs83eag8",
        "badges": [],
        "createdAt": 1774298220444,
        "displayName": "Openclaw Tokenapi Qiehuan Skills",
        "latestVersionId": "k975jhct6x49h47e11ksy9kxms83f4r0",
        "ownerPublisherId": "s17ctzydrcsq9aggvmca4daqz183fxdg",
        "ownerUserId": "kn70rh2kxzkygcsqjf4e155gcd809v0v",
        "slug": "openclaw-tokenapi-qiehuan-skills",
        "stats": {
            "comments": 0,
            "downloads": 16,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "提供基于WebUI的快速AI模型切换工具，支持保存配置、一键切换、批量导入及API Key本地存储管理。",
        "tags": {
            "latest": "k975jhct6x49h47e11ksy9kxms83f4r0"
        },
        "updatedAt": 1774300006632
    }
}