55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement the described QiXinBao enterprise lookup and only needs one API token, but there are incoherences around declared requirements and guidance that could lead users to leak...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774432512541,
        "_id": "k97dbtcem8mhc17xb8gaedjcax83k6cr",
        "changelog": "- 增加 Openclaw 兼容性元数据，补充对依赖和安装步骤的声明\n- SKILL.md 文件新增定义必需的运行时环境和自动安装 Node.js 依赖（axios）\n- 其余功能未作修改",
        "changelogSource": "auto",
        "createdAt": 1774432512541,
        "parsed": {
            "clawdis": {
                "install": [
                    {
                        "id": "npm-deps",
                        "kind": "node",
                        "label": "Install Node.js dependencies",
                        "package": "axios"
                    }
                ],
                "requires": {
                    "bins": [
                        "node",
                        "npm"
                    ],
                    "env": [
                        "QXBENT_API_TOKEN"
                    ]
                }
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s178zdb1e2mfg5vbeme8zbqkex83j3he",
        "displayName": "llx-26",
        "handle": "llx-26",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/73281691?v=4",
        "kind": "user",
        "linkedUserId": "kn739sjykavd7gmnx2rew9ntf182yepk"
    },
    "ownerHandle": "llx-26",
    "skill": {
        "_creationTime": 1773590057456,
        "_id": "kd73e33djezkp5h0mxs58awf1s82y43r",
        "badges": [],
        "createdAt": 1773590057456,
        "displayName": "企业信息查询",
        "latestVersionId": "k97dbtcem8mhc17xb8gaedjcax83k6cr",
        "ownerPublisherId": "s178zdb1e2mfg5vbeme8zbqkex83j3he",
        "ownerUserId": "kn739sjykavd7gmnx2rew9ntf182yepk",
        "slug": "qxbent",
        "stats": {
            "comments": 0,
            "downloads": 118,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 3
        },
        "summary": "启信宝企业信息查询工具，提供企业工商信息、股东信息、主要人员、变更记录等查询功能。支持通过企业名称查询，返回标准化的企业数据。",
        "tags": {
            "latest": "k97dbtcem8mhc17xb8gaedjcax83k6cr"
        },
        "updatedAt": 1774435621427
    }
}