41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions generally match a Proton Pass CLI usage guide, but there are multiple operational and security red flags (remote install script execution, explicit guidance to place plaintext...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769707732900,
        "_id": "k97dqajdaa3z20bmasypbhyej9805ap1",
        "changelog": "Major update: Added secret injection commands (run, inject), configuration management, key storage providers, Docker support, telemetry controls, and expanded troubleshooting. Now includes complete secret management workflows for application integration.",
        "changelogSource": "user",
        "createdAt": 1769707732900,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "KakatkarAkshay",
        "handle": "kakatkarakshay",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/49910222?v=4",
        "kind": "user",
        "linkedUserId": "kn78y5cw6z98w93yh24n7bdats7zygwq"
    },
    "ownerHandle": "kakatkarakshay",
    "skill": {
        "_creationTime": 1769707182776,
        "_id": "kd79bjns3sd0pptyzpd3vcvhen805z1v",
        "badges": [],
        "createdAt": 1769707182776,
        "displayName": "Proton Pass CLI",
        "latestVersionId": "k97dqajdaa3z20bmasypbhyej9805ap1",
        "ownerUserId": "kn78y5cw6z98w93yh24n7bdats7zygwq",
        "slug": "proton-pass",
        "stats": {
            "comments": 0,
            "downloads": 1958,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 2
        },
        "summary": "Manage Proton Pass vaults, items (logins, SSH keys, aliases, notes), passwords, SSH agent integration, and secret injection into applications. Use when working with Proton Pass for password management, SSH key storage, secret injection (run commands with secrets, inject into templates), environment variable injection, or generating secure passwords. Supports vault\/item CRUD, sharing, member management, SSH agent operations, TOTP generation, secret references (pass:\/\/vault\/item\/field), template injection, and command execution with secrets.",
        "tags": {
            "latest": "k97dqajdaa3z20bmasypbhyej9805ap1"
        },
        "updatedAt": 1774321762114
    }
}