65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (post/schedule to Mastodon via Publora) is plausible, but the runtime instructions reference an API key and local file access without declaring required credentials or a dep...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773488718288,
        "_id": "k97d35yjy4pb95gaatcwenk9q582wfvt",
        "changelog": "March 2026: updated platform limits, new API docs, Threads nesting warning",
        "changelogSource": "user",
        "createdAt": 1773488718288,
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Sergey Bulaev",
        "handle": "sergebulaev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/241980?v=4",
        "kind": "user",
        "linkedUserId": "kn78vd4zr956q020mrry482ath81gra0"
    },
    "ownerHandle": "sergebulaev",
    "skill": {
        "_creationTime": 1771626036707,
        "_id": "kd71eg392prgrjve2ysv4zdkqs81g1n7",
        "badges": [],
        "createdAt": 1771626036707,
        "displayName": "Publora Mastodon",
        "latestVersionId": "k97d35yjy4pb95gaatcwenk9q582wfvt",
        "ownerUserId": "kn78vd4zr956q020mrry482ath81gra0",
        "slug": "publora-mastodon",
        "stats": {
            "comments": 0,
            "downloads": 300,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "Post or schedule content to Mastodon using the Publora API. Use this skill when the user wants to publish or schedule Mastodon posts via Publora.",
        "tags": {
            "latest": "k97d35yjy4pb95gaatcwenk9q582wfvt"
        },
        "updatedAt": 1774326032593
    }
}