37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill largely implements its stated email IMAP/SMTP functionality, but there are several mismatches between its metadata/instructions and its code (missing declared requirements, an advertised CLI...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774569232813,
        "_id": "k974kzbzwmh3mtqd0yfgrnz9qd83mz62",
        "changelog": "Initial release of 腾讯企业邮箱 skill:\n\n- Send, receive, and read emails from exmail.qq.com via IMAP\/SMTP using Node.js scripts.\n- Credentials (account and authorization code) are read from environment variables.\n- Includes scripts for sending (`send.js`), receiving (`receive.js`), and fetching full email body by UID (`get-body.js`).\n- Supports fetching recent N messages or messages from the last N days, with convenient CLI options.\n- Output includes subject, sender, date, UID, and content summary. Full plain-text body available by UID.\n- Security best practices: never commit credentials; use authorization code, not login password.",
        "changelogSource": "user",
        "createdAt": 1774569232813,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s174y10m7q793f4jxvndq3329s83fqfn",
        "displayName": "hunger09",
        "handle": "hunger09",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/211690941?v=4",
        "kind": "user",
        "linkedUserId": "kn7b8k5acnhsvm414rnp57kssd82rq1n"
    },
    "ownerHandle": "hunger09",
    "skill": {
        "_creationTime": 1774569232813,
        "_id": "kd7aksp0mycffa50j2mhm7zfs983mttg",
        "badges": [],
        "createdAt": 1774569232813,
        "displayName": "腾讯企业邮箱\/qqexmail",
        "latestVersionId": "k974kzbzwmh3mtqd0yfgrnz9qd83mz62",
        "ownerPublisherId": "s174y10m7q793f4jxvndq3329s83fqfn",
        "ownerUserId": "kn7b8k5acnhsvm414rnp57kssd82rq1n",
        "slug": "qqexmail",
        "stats": {
            "comments": 0,
            "downloads": 8,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "通过 IMAP\/SMTP 收发腾讯企业邮箱（exmail.qq.com）邮件。支持发送邮件、收取邮件列表、获取邮件正文。凭证从环境变量读取。",
        "tags": {
            "latest": "k974kzbzwmh3mtqd0yfgrnz9qd83mz62"
        },
        "updatedAt": 1774570309457
    }
}