37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly does what it claims (serve a local cron dashboard), but it fetches remote HTML and injects sensitive local cron data into that template and has a few metadata/install inconsistencies ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773767005994,
        "_id": "k97frsx21wg2sj9rpz8cgcr1z9832hvt",
        "changelog": "OpenCron 1.2.0 streamlines dashboard setup and deployment.\n\n- Simplified setup: running serve.py now fetches, embeds, and serves the updated dashboard in one step.\n- Data is freshly embedded and served at \/cron.html on every request—no client-side fetch needed.\n- Public IP\/port guidance replaced with a static localhost URL for easier access and usage.\n- Scripts and documentation clarified; update_canvas.py can be run with --sync, and serve.py is the primary deployment path.\n- Outdated instructions and demo details removed for a cleaner, shorter README.",
        "changelogSource": "auto",
        "createdAt": 1773767005994,
        "parsed": {
            "clawdis": {
                "emoji": "⚡",
                "requires": {
                    "bins": [
                        "python3"
                    ]
                }
            }
        },
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Floris Jan-Werner van der Harst",
        "handle": "firstfloris",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/63602213?v=4",
        "kind": "user",
        "linkedUserId": "kn7daygrpxynhz4g4yc9r8kqyh833mrg"
    },
    "ownerHandle": "firstfloris",
    "skill": {
        "_creationTime": 1773752442811,
        "_id": "kd71brz2fxrsd2gkvjdxnvkyrd833ssy",
        "badges": [],
        "createdAt": 1773752442811,
        "displayName": "Opencron Skill Repo",
        "latestVersionId": "k97frsx21wg2sj9rpz8cgcr1z9832hvt",
        "ownerUserId": "kn7daygrpxynhz4g4yc9r8kqyh833mrg",
        "slug": "opencron",
        "stats": {
            "comments": 0,
            "downloads": 68,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 8
        },
        "summary": "Visual cron job dashboard for OpenClaw — live countdown timers, run history, calendar view",
        "tags": {
            "latest": "k97frsx21wg2sj9rpz8cgcr1z9832hvt"
        },
        "updatedAt": 1774336206362
    }
}