47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill does what it says (stores secrets in a local JSON file) but contains unsafe choices and inconsistencies—plaintext storage, an undeclared Node dependency, and a command-injection risk when ad...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773749808317,
        "_id": "k9716bv4t5v6zka0c32wp59ban832nx1",
        "changelog": "Initial release – manage and store private secrets like API keys and passwords.\n\n- Add new secrets by specifying a name and content.\n- List all stored secret names (content hidden).\n- View the content of a specific secret by name.\n- Secrets are saved in \/workspace\/skills\/private-secrets-1.0.0\/secrets.json.\n- Data is stored unencrypted; regular backups are recommended.",
        "changelogSource": "auto",
        "createdAt": 1773749808317,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "anmu14641",
        "handle": "anmu14641",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/239561593?v=4",
        "kind": "user",
        "linkedUserId": "kn755y87neksfrcj84dqczxn5982ggav"
    },
    "ownerHandle": "anmu14641",
    "skill": {
        "_creationTime": 1773749808317,
        "_id": "kd7an0vps7p8te4ey6bf1rs249833cy7",
        "badges": [],
        "createdAt": 1773749808317,
        "displayName": "Private Secrets",
        "latestVersionId": "k9716bv4t5v6zka0c32wp59ban832nx1",
        "ownerUserId": "kn755y87neksfrcj84dqczxn5982ggav",
        "slug": "private-secrets-1-0-0",
        "stats": {
            "comments": 0,
            "downloads": 52,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Securely store, list, and retrieve your private information like API keys, passwords, and tokens in a local JSON file.",
        "tags": {
            "latest": "k9716bv4t5v6zka0c32wp59ban832nx1"
        },
        "updatedAt": 1774336175428
    }
}