59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's description promises active API attack and discovery capabilities, but the included code is a lightweight scaffold that only validates scope and writes placeholder artifacts — this mismatc...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772315647063,
        "_id": "k975p44y6aajww5632px5eyzb5821xjh",
        "changelog": "pentest-api-attacker v0.1.0\n\n- Initial release with support for testing APIs against OWASP API Security Top 10.\n- Includes mechanisms for API endpoint discovery, authentication abuse, and protocol-specific checks.\n- Enforces scope validation and authorization before active testing.\n- Outputs findings and artifacts in standard formats for reporting and downstream use.\n- Integrates with PTES, MITRE ATT&CK, OWASP WSTG, and NIST SP 800-115 methodologies.",
        "changelogSource": "auto",
        "createdAt": 1772315647063,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Muhammad Mazhar Saeed",
        "handle": "0x-professor",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/160357695?v=4",
        "kind": "user",
        "linkedUserId": "kn757hy9x0k6n9x9ck9v9j4ywd81we48"
    },
    "ownerHandle": "0x-professor",
    "skill": {
        "_creationTime": 1772315647063,
        "_id": "kd7c53nj4y44r7zq7vbdmqrw4x821z1c",
        "badges": [],
        "createdAt": 1772315647063,
        "displayName": "Pentest Api Attacker",
        "latestVersionId": "k975p44y6aajww5632px5eyzb5821xjh",
        "ownerUserId": "kn757hy9x0k6n9x9ck9v9j4ywd81we48",
        "slug": "pentest-api-attacker",
        "stats": {
            "comments": 0,
            "downloads": 581,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 1,
            "versions": 1
        },
        "summary": "Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.",
        "tags": {
            "latest": "k975p44y6aajww5632px5eyzb5821xjh"
        },
        "updatedAt": 1772315660675
    }
}