55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's stated WMS/ERP routing rules and runtime tool (q-wms-flow) are coherent, but the package includes plugin code and install scripts that can persist credentials and execute workspace Python ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774606360326,
        "_id": "k971ebs1c1j02ysdfwq6rjqzh583pcn5",
        "changelog": "fix: pass userInput through q-wms-flow to backend tool.execute",
        "changelogSource": "user",
        "createdAt": 1774606360326,
        "version": "1.0.44"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17bnqw011fkk6zgec75bstmhn83h006",
        "displayName": "lee",
        "handle": "ljqdh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/3345915?v=4",
        "kind": "user",
        "linkedUserId": "kn7dkx87ej0dkcr59wwrbw4b49830vry"
    },
    "ownerHandle": "ljqdh",
    "skill": {
        "_creationTime": 1774600558743,
        "_id": "kd7dyc6tk7jbasyb010zhjkgks83qmh3",
        "badges": [],
        "createdAt": 1774600558743,
        "displayName": "Q Wms",
        "latestVersionId": "k971ebs1c1j02ysdfwq6rjqzh583pcn5",
        "ownerPublisherId": "s17bnqw011fkk6zgec75bstmhn83h006",
        "ownerUserId": "kn7dkx87ej0dkcr59wwrbw4b49830vry",
        "slug": "q-wms",
        "stats": {
            "comments": 0,
            "downloads": 38,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "千易 SaaS 智能助手（WMS\/ERP），负责库存、仓库、货主、库存日志、订单池、订单\/任务\/库内绩效\/进销存（新）查询；WMS 对话必须优先调用 q-wms-flow。",
        "tags": {
            "latest": "k971ebs1c1j02ysdfwq6rjqzh583pcn5"
        },
        "updatedAt": 1774608110044
    }
}