65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The package appears to be a legitimate PrestaShop Bridge contract, but there are important inconsistencies (missing referenced files, mismatched registry metadata, and a hard-coded HMAC secret in the ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774078132695,
        "_id": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
        "changelog": "Version 1.0.3 fixes publication trust issues by aligning package version metadata, declaring the environment contract explicitly, replacing all placeholder HMAC signatures with exact computed values, and strengthening local validation for examples and runtime requirements.",
        "changelogSource": "user",
        "createdAt": 1774078132695,
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Ansz089",
        "handle": "ansz089",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/160032891?v=4",
        "kind": "user",
        "linkedUserId": "kn788y6rmtzbp7qswzn445jknx8150hz"
    },
    "ownerHandle": "ansz089",
    "skill": {
        "_creationTime": 1774073691107,
        "_id": "kd77bemjn62583ny37f6616cgx83abdv",
        "badges": [],
        "createdAt": 1774073691107,
        "displayName": "PrestaShop Bridge V1",
        "latestVersionId": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
        "ownerUserId": "kn788y6rmtzbp7qswzn445jknx8150hz",
        "slug": "prestashop-bridge-v1",
        "stats": {
            "comments": 0,
            "downloads": 33,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Secure skill pack for operating a PrestaShop 9 Bridge through a stable, signed, asynchronous API contract.",
        "tags": {
            "api": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "bridge": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "hmac": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "latest": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "oauth2": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "openclaw": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "prestashop": "k977653jzzhy9sx3mgnbvh0pwh83bzrz",
            "symfony": "k977653jzzhy9sx3mgnbvh0pwh83bzrz"
        },
        "updatedAt": 1774081011924
    }
}