59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions require and use a PERPETUA_API_KEY to proxy sensitive OAuth-backed APIs via an external hosted service, but the skill metadata does not declare this credential or the external...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771973918905,
        "_id": "k974z1j94r3q7kpbjwzwx8jsrn81r3ra",
        "changelog": "- Initial release of the Perpetua skill.\n- Provides an OAuth proxy for external APIs (Oura, Google Calendar) via a single API key from Perpetua.sh.\n- Documentation covers API usage, connection management, example requests, and troubleshooting.\n- Hosted API at https:\/\/www.perpetua.sh is the default operational path.",
        "changelogSource": "auto",
        "createdAt": 1771973918905,
        "parsed": {
            "clawdis": {
                "emoji": "🔑"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Daniel Killenberger",
        "handle": "danielkillenberger",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5844780?v=4",
        "kind": "user",
        "linkedUserId": "kn73cenw375v5asqv6493evt9s81ctk7"
    },
    "ownerHandle": "danielkillenberger",
    "skill": {
        "_creationTime": 1771912135462,
        "_id": "kd774rvv6r023z461qvpjm3msn81rz4m",
        "badges": [],
        "createdAt": 1771912135462,
        "displayName": "Perpetua",
        "latestVersionId": "k974z1j94r3q7kpbjwzwx8jsrn81r3ra",
        "ownerUserId": "kn73cenw375v5asqv6493evt9s81ctk7",
        "slug": "perpetua",
        "stats": {
            "comments": 0,
            "downloads": 291,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "OAuth proxy for calling external APIs (Oura, Google Calendar, etc.) via Perpetua.sh hosted API using a single API key. Use when fetching Oura data, Google Ca...",
        "tags": {
            "latest": "k974z1j94r3q7kpbjwzwx8jsrn81r3ra"
        },
        "updatedAt": 1772064341505
    }
}