37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill claims to fetch Opik traces and analyze them, but the code does not call any Opik API (it uses simulated data), contains a hard-coded API key in the repo, and uses hard-coded absolute user p...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773359586754,
        "_id": "k97be3yd358sbbw2vs2a9wx53182s7bm",
        "changelog": "Opik Reporter v1.0.0\n\n- Initial release.\n- Fetches Opik trace data, analyzes usage, costs, and errors.\n- Generates hourly and daily summary reports with actionable insights.\n- Automatically sends formatted reports and error alerts to Discord.\n- Provides configuration options for scheduling and report delivery.\n- Supports manual and scheduled report generation.",
        "changelogSource": "auto",
        "createdAt": 1773359586754,
        "parsed": {
            "clawdis": {
                "author": "sunnyhot"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "LuckPoppy",
        "handle": "sunnyhot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8822672?v=4",
        "kind": "user",
        "linkedUserId": "kn79e7737znkq4877n6wc93wn58292v9"
    },
    "ownerHandle": "sunnyhot",
    "skill": {
        "_creationTime": 1773359586754,
        "_id": "kd7dt31jsef6bd143b7h5hs5rs82sms8",
        "badges": [],
        "createdAt": 1773359586754,
        "displayName": "Opik Reporter",
        "latestVersionId": "k97be3yd358sbbw2vs2a9wx53182s7bm",
        "ownerUserId": "kn79e7737znkq4877n6wc93wn58292v9",
        "slug": "opik-reporter",
        "stats": {
            "comments": 0,
            "downloads": 133,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Opik observability reporter - fetches traces, analyzes usage, costs, and errors, then sends reports to Discord.",
        "tags": {
            "latest": "k97be3yd358sbbw2vs2a9wx53182s7bm"
        },
        "updatedAt": 1774332721900
    }
}