41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (a CLI to check Foodora/Deliveroo orders) is plausible, but the runtime instructions reference sensitive local browser profiles, cookie import, and an undocumented env var/token — ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1767545372216,
        "_id": "k970jbd7wh96zwhqbezd8ypbxs7yktyc",
        "changelog": "",
        "createdAt": 1767545372216,
        "parsed": {
            "clawdis": {
                "emoji": "🛵",
                "install": [
                    {
                        "bins": [
                            "ordercli"
                        ],
                        "formula": "steipete\/tap\/ordercli",
                        "id": "brew",
                        "kind": "brew",
                        "label": "Install ordercli (brew)"
                    },
                    {
                        "bins": [
                            "ordercli"
                        ],
                        "id": "go",
                        "kind": "go",
                        "label": "Install ordercli (go)",
                        "module": "github.com\/steipete\/ordercli\/cmd\/ordercli@latest"
                    }
                ],
                "requires": {
                    "bins": [
                        "ordercli"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Peter Steinberger",
        "handle": "steipete",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/58493?v=4",
        "kind": "user",
        "linkedUserId": "kn70pywhg0fyz996kpa8xj89s57yhv26"
    },
    "ownerHandle": "steipete",
    "skill": {
        "_creationTime": 1767545372216,
        "_id": "kd77w80rk92agj5xrbx5e7kfbn7yjqxk",
        "badges": [],
        "createdAt": 1767545372216,
        "displayName": "Ordercli",
        "latestVersionId": "k970jbd7wh96zwhqbezd8ypbxs7yktyc",
        "ownerUserId": "kn70pywhg0fyz996kpa8xj89s57yhv26",
        "slug": "ordercli",
        "stats": {
            "comments": 0,
            "downloads": 6574,
            "installsAllTime": 863,
            "installsCurrent": 845,
            "stars": 3,
            "versions": 1
        },
        "summary": "Foodora-only CLI for checking past orders and active order status (Deliveroo WIP).",
        "tags": {
            "latest": "k970jbd7wh96zwhqbezd8ypbxs7yktyc"
        },
        "updatedAt": 1774321219312
    }
}