37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill largely matches its description (a local qmd CLI wrapper for semantic search) but contains unsafe shell execution of user-provided args and recommends installing a package from a GitHub URL ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773538382417,
        "_id": "k97dp6mbgpaxc1x48vcf6sjv1h82yr7j",
        "changelog": "v1.2.0 - 思捷娅科技(SJYKJ)版权统一版",
        "changelogSource": "user",
        "createdAt": 1773538382417,
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "zhaog100",
        "handle": "zhaog100",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/145524174?v=4",
        "kind": "user",
        "linkedUserId": "kn7dz1a3ck660xg5scsnw50jgn82860t"
    },
    "ownerHandle": "zhaog100",
    "skill": {
        "_creationTime": 1772765399092,
        "_id": "kd7bnxwer2nhx0g41b2vfsvd8s82dk83",
        "badges": [],
        "createdAt": 1772765399092,
        "displayName": "QMD Manager",
        "latestVersionId": "k97dp6mbgpaxc1x48vcf6sjv1h82yr7j",
        "ownerUserId": "kn7dz1a3ck660xg5scsnw50jgn82860t",
        "slug": "qmd-manager",
        "stats": {
            "comments": 0,
            "downloads": 377,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 3
        },
        "summary": "QMD 知识库管理技能，用于本地知识库的语义搜索和管理。支持项目管理、软件测试、内容创作等领域的知识检索。",
        "tags": {
            "latest": "k97dp6mbgpaxc1x48vcf6sjv1h82yr7j"
        },
        "updatedAt": 1774329786583
    }
}