41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill does what it says (send code to a remote analyzer) but its runtime instructions and included script will read arbitrary files and POST their contents to a third-party endpoint without warnin...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772060974176,
        "_id": "k97d813f8pq67z4eanxvhk2hhs81vbtc",
        "changelog": "Initial release of code-review skill powered by LogicArt:\n\n- Analyze code snippets or files for bugs, security issues, complexity, suggestions, and logic flow.\n- API and CLI interface provided for flexible code analysis.\n- Guidance on presenting results: prioritize critical bugs, show complexity, and include suggestions and logic flow.\n- Options for scanning full repositories and integration with related skills like workflow-engine and quack-coordinator.\n- Designed to trigger on typical code review and analysis phrases.",
        "changelogSource": "auto",
        "createdAt": 1772060974176,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "JPaulGrayson",
        "handle": "jpaulgrayson",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/212611253?v=4",
        "kind": "user",
        "linkedUserId": "kn75h5qg11dr8c9tyeavswt67181rf1w"
    },
    "ownerHandle": "jpaulgrayson",
    "skill": {
        "_creationTime": 1772060974176,
        "_id": "kd79acaf57s2tj7gz37kktaxth81t19a",
        "badges": [],
        "createdAt": 1772060974176,
        "displayName": "Code Review",
        "latestVersionId": "k97d813f8pq67z4eanxvhk2hhs81vbtc",
        "ownerUserId": "kn75h5qg11dr8c9tyeavswt67181rf1w",
        "slug": "quack-code-review",
        "stats": {
            "comments": 0,
            "downloads": 1028,
            "installsAllTime": 13,
            "installsCurrent": 13,
            "stars": 0,
            "versions": 1
        },
        "summary": "AI-powered code analysis via LogicArt — find bugs, security issues, and get logic flow visualizations. Use when reviewing code, analyzing code quality, findi...",
        "tags": {
            "latest": "k97d813f8pq67z4eanxvhk2hhs81vbtc"
        },
        "updatedAt": 1774327157474
    }
}