47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The SKILL.md describes a local Android HTTP proxy that fits the skill's stated purpose, but it embeds a hard-coded token, has no provenance, and exposes powerful device capabilities (Intents and Conte...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773762130211,
        "_id": "k972m5qk985gj7g6djam4tyrzn8338bz",
        "changelog": "Initial release of oskill-proxy — a local HTTP API proxy for Android component invocation.\n\n- Provides endpoints to start Activity, Service, send Broadcasts, and operate on ContentProvider via HTTP.\n- Supports both explicit and implicit Intents, extras with typed or auto-inferred parameters, and standard Android flags.\n- API includes endpoints for querying, inserting, updating, deleting, and calling methods on ContentProviders.\n- All actions require Bearer token authentication (except service status check).\n- Includes detailed error codes and example requests for easy integration.\n- GET \/api\/v1\/status endpoint allows checking if the proxy service is up (no token required).",
        "changelogSource": "auto",
        "createdAt": 1773762130211,
        "parsed": {
            "clawdis": {
                "author": "Raynor"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "SOSO-eng",
        "handle": "soso-eng",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7226024?v=4",
        "kind": "user",
        "linkedUserId": "kn7e58znt8z7z4nevpxg2z4p1h832v78"
    },
    "ownerHandle": "soso-eng",
    "skill": {
        "_creationTime": 1773762130211,
        "_id": "kd7477trr9293pgc6056wtfq3h832h82",
        "badges": [],
        "createdAt": 1773762130211,
        "displayName": "Oskill Proxy",
        "latestVersionId": "k972m5qk985gj7g6djam4tyrzn8338bz",
        "ownerUserId": "kn7e58znt8z7z4nevpxg2z4p1h832v78",
        "slug": "oskill-proxy",
        "stats": {
            "comments": 0,
            "downloads": 55,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Android组件调用代理。通过本地HTTP API在Android设备上启动Activity、启动Service、发送Broadcast、操作ContentProvider。当你无法直接执行Android Intent或组件调用时（例如在Termux环境中），使用此工具完成调用。",
        "tags": {
            "latest": "k972m5qk985gj7g6djam4tyrzn8338bz"
        },
        "updatedAt": 1774336335551
    }
}