47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill is coherent with Porkbun domain/DNS management, but the shell script unsafely evals workspace .env contents (command-injection risk) and assumes jq/curl are present without declaring them.

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774516526381,
        "_id": "k97epmjq2xbb2zhf8t3m1qyxrs83mr7z",
        "changelog": "Initial release — full Porkbun API v3 wrapper (domains, DNS, URL forwarding, SSL, pricing)",
        "changelogSource": "user",
        "createdAt": 1774516526381,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1707neksyywgz1cnjq6552yk583h31v",
        "displayName": "DanielGrobelny",
        "handle": "danielgrobelny",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7581754?v=4",
        "kind": "user",
        "linkedUserId": "kn7c4rc7qxznv2h2pfmy27xf3x83hkke"
    },
    "ownerHandle": "danielgrobelny",
    "skill": {
        "_creationTime": 1774516526381,
        "_id": "kd7ampxmj888tehnf6qyxcrvfx83mbd2",
        "badges": [],
        "createdAt": 1774516526381,
        "displayName": "Porkbun Domains & DNS",
        "latestVersionId": "k97epmjq2xbb2zhf8t3m1qyxrs83mr7z",
        "ownerPublisherId": "s1707neksyywgz1cnjq6552yk583h31v",
        "ownerUserId": "kn7c4rc7qxznv2h2pfmy27xf3x83hkke",
        "slug": "porkbun-domains",
        "stats": {
            "comments": 0,
            "downloads": 3,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Manage domains and DNS via the Porkbun API. Use when asked to list domains, check domain availability, manage DNS records (A, AAAA, CNAME, MX, TXT, etc.), up...",
        "tags": {
            "latest": "k97epmjq2xbb2zhf8t3m1qyxrs83mr7z"
        },
        "updatedAt": 1774516557053
    }
}