47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill generally does what its name says (download invoice attachments), but it contains hard-coded QQ mailbox credentials, fixed filesystem paths, and unannounced external-reporting code — an inco...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774523330871,
        "_id": "k972k7zqf2d1bkm1e9rmfb7ej983nz96",
        "changelog": "v1.1: LLM增强分析 Phase 1完成，33平台selector，真实MiniMax-M2.7 API验证通过",
        "changelogSource": "user",
        "createdAt": 1774523330871,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17d1nxrj7tst8t5j0yqsqn0bs83hb95",
        "displayName": "FrankFuShMomentLab",
        "handle": "frankfushmomentlab",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/130262399?v=4",
        "kind": "user",
        "linkedUserId": "kn76bf20acd1xzgbjx7csjfkh1828jeb"
    },
    "ownerHandle": "frankfushmomentlab",
    "skill": {
        "_creationTime": 1774514074323,
        "_id": "kd77y5czj3nh2qbkc2frt8hdw183nf9c",
        "badges": [],
        "createdAt": 1774514074323,
        "displayName": "QQ邮箱发票下载器",
        "latestVersionId": "k972k7zqf2d1bkm1e9rmfb7ej983nz96",
        "ownerPublisherId": "s17d1nxrj7tst8t5j0yqsqn0bs83hb95",
        "ownerUserId": "kn76bf20acd1xzgbjx7csjfkh1828jeb",
        "slug": "qq-invoice-downloader",
        "stats": {
            "comments": 0,
            "downloads": 29,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "自动登录QQ邮箱，按日期搜索发票邮件，下载PDF附件和解压ZIP，过滤非发票，生成分类Excel报告。",
        "tags": {
            "latest": "k972k7zqf2d1bkm1e9rmfb7ej983nz96"
        },
        "updatedAt": 1774523508530
    }
}