65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's steps align with its stated purpose, but it relies on running an unpinned npm package via npx and the SKILL.md asks for credentials that are not declared in the metadata — both are legitim...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774103077051,
        "_id": "k97bn77mccp4qjsyv9p7anfa7n83bmf9",
        "changelog": "- Updated CLI commands to use npx polyv-live-cli@latest for improved reliability.\n- Clarified AppID\/AppSecret instructions with updated console URL and navigation path.\n- Minor text and terminology improvements for clarity.",
        "changelogSource": "user",
        "createdAt": 1774103077051,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "terryso",
        "handle": "terryso",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/106784?v=4",
        "kind": "user",
        "linkedUserId": "kn74gkj5m1rk89yf5beneexwsd82b5h7"
    },
    "ownerHandle": "terryso",
    "skill": {
        "_creationTime": 1774100769627,
        "_id": "kd7307djt3nra93trda0zr0v7n83bacp",
        "badges": [],
        "createdAt": 1774100769627,
        "displayName": "polyv-e-commerce-setup",
        "latestVersionId": "k97bn77mccp4qjsyv9p7anfa7n83bmf9",
        "ownerUserId": "kn74gkj5m1rk89yf5beneexwsd82b5h7",
        "slug": "polyv-e-commerce-setup",
        "stats": {
            "comments": 0,
            "downloads": 61,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "一键配置电商直播环境（频道、商品、优惠券）",
        "tags": {
            "latest": "k97bn77mccp4qjsyv9p7anfa7n83bmf9"
        },
        "updatedAt": 1774105609538
    }
}