65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's instructions are consistent with a web-reading API and require a single API key, but the registry metadata omits that required secret and the runtime sends arbitrary page content to an ext...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773931157018,
        "_id": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
        "changelog": "Major update: Project Ghost 2.0.0 introduces a streamlined web reading layer for AI agents.\n\n- Instantly converts any public URL into structured intelligence in one API call.\n- Extracts business intent, named entities, confidence score, token savings, and priority score from web pages.\n- Features a clear, agent-ready API response format for easy integration.\n- Offers free API keys with 100 requests\/month.\n- Improved compatibility with major public websites; returns clear messages for blocked pages.",
        "changelogSource": "user",
        "createdAt": 1773931157018,
        "parsed": {
            "clawdis": {
                "author": "Sid890-cpu",
                "homepage": "https:\/\/project-ghost-lilac.vercel.app"
            }
        },
        "version": "2.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Sid890-cpu",
        "handle": "sid890-cpu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/242359767?v=4",
        "kind": "user",
        "linkedUserId": "kn792emf12dw5zwgtz3d1yv5z18370e0"
    },
    "ownerHandle": "sid890-cpu",
    "skill": {
        "_creationTime": 1773931157018,
        "_id": "kd744x6x8sy2py21w14ee7eggs8369yy",
        "badges": [],
        "createdAt": 1773931157018,
        "displayName": "Project Ghost",
        "latestVersionId": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
        "ownerUserId": "kn792emf12dw5zwgtz3d1yv5z18370e0",
        "slug": "project-ghost",
        "stats": {
            "comments": 0,
            "downloads": 33,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Web reading layer for AI agents. Convert any public URL into structured intelligence — entities, business intent, confidence score — in one API call.",
        "tags": {
            "agents": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
            "api": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
            "data-extraction": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
            "intelligence": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
            "latest": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
            "latestweb": "k9734xfavpw46kpwzsp1k1pdn9836zk8",
            "research": "k9734xfavpw46kpwzsp1k1pdn9836zk8"
        },
        "updatedAt": 1773933110758
    }
}