41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions line up with its stated purpose, but it asks the agent to install/run an external npm CLI from an unknown source and to persist an API key and bridge into the agent workspace ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772859116055,
        "_id": "k9764y8v5k3kf2pq39jzv52c9582f1ea",
        "changelog": "Auto-publish from commit ee5f248ff4d308eea7f1e1dc136b27bde54a2228",
        "changelogSource": "user",
        "createdAt": 1772859116055,
        "version": "5.1.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Michael Nome",
        "handle": "xmanatee",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/14187267?v=4",
        "kind": "user",
        "linkedUserId": "kn7dacqx7wrxh67ft9bvh0bm2x81t602"
    },
    "ownerHandle": "xmanatee",
    "skill": {
        "_creationTime": 1771988467145,
        "_id": "kd74ffm4n2wkgjwp15jy5qac8h81t5gf",
        "badges": [],
        "createdAt": 1771988467145,
        "displayName": "Pubblue",
        "latestVersionId": "k9764y8v5k3kf2pq39jzv52c9582f1ea",
        "ownerUserId": "kn7dacqx7wrxh67ft9bvh0bm2x81t602",
        "slug": "pubblue",
        "stats": {
            "comments": 0,
            "downloads": 456,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 13
        },
        "summary": "Publish and visualize output via the pubblue CLI, with live P2P browser sessions.",
        "tags": {
            "latest": "k9764y8v5k3kf2pq39jzv52c9582f1ea"
        },
        "updatedAt": 1774326932194
    }
}