59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

RankClaw's stated purpose (a remote trust/audit service) matches most of the artifacts, but the skill instructs agents to add a persistent remote MCP server, includes a prompt-injection pattern in its...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772550247761,
        "_id": "k97871jqkqcdmef9q39hxy8ar182767h",
        "changelog": "**Major update: Expanded documentation and improved guidance for agent security checks.**\n\n- Added a comprehensive SKILL.md describing RankClaw’s purpose, trust layer features, and security evaluation process.\n- Detailed integration steps for OpenClaw, nanoclaw, picoclaw, nanobot, and MCP-compatible clients.\n- Explained audit criteria and attack pattern detection: prompt injection, phantom prerequisites, brand impersonation, credential staging, supply chain pivots, and scope creep.\n- Outlined agent decision protocols, score interpretation, and examples for safer skill installation workflows.\n- Provided new sections for direct API usage, score freshness, leaderboard access, badge embedding, and guidance for skill authors.",
        "changelogSource": "auto",
        "createdAt": 1772550247761,
        "parsed": {
            "clawdis": []
        },
        "version": "2.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "tudoanh",
        "handle": "tudoanh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/11133329?v=4",
        "kind": "user",
        "linkedUserId": "kn787104arrpsp4n7haa5njeq9823nx4"
    },
    "ownerHandle": "tudoanh",
    "skill": {
        "_creationTime": 1772550247761,
        "_id": "kd77q9xvmhds65ext4hcdad5ed826dty",
        "badges": [],
        "createdAt": 1772550247761,
        "displayName": "RankClaw",
        "latestVersionId": "k97871jqkqcdmef9q39hxy8ar182767h",
        "ownerUserId": "kn787104arrpsp4n7haa5njeq9823nx4",
        "slug": "rankclaw",
        "stats": {
            "comments": 0,
            "downloads": 191,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "RankClaw — AI Agent Trust Layer. Check any ClawHub, OpenClaw, nanobot, nanoclaw, picoclaw, or MCP server skill against 14,700+ indexed tools before installin...",
        "tags": {
            "agent-security": "k97871jqkqcdmef9q39hxy8ar182767h",
            "latest": "k97871jqkqcdmef9q39hxy8ar182767h",
            "security": "k97871jqkqcdmef9q39hxy8ar182767h",
            "trust": "k97871jqkqcdmef9q39hxy8ar182767h"
        },
        "updatedAt": 1772550266622
    }
}