41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill largely does what it claims (robot control), but its runtime instructions and scripts implicitly require SSH credentials, sshpass/ssh/scp and other local tools yet declare no required creden...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769643214340,
        "_id": "k973eh1af7k4jse3xxaky07a9h802sr9",
        "changelog": "Updated 1.1.0 release.\n\n- Added `reachy-react.sh` script for contextual robot reactions integrated with heartbeat, cron, and session triggers.\n- Provides quick commands for nodding, success, alerts, reminders, idle animation, morning wake-up, goodnight routine, patrol (snapshot), directional audio tracking, and celebration dances.\n- Built-in quiet hours skip reactions automatically at night, with auto-wake and fault-tolerant behavior.\n- No changes to existing `reachy.sh` CLI or core documentation.",
        "changelogSource": "user",
        "createdAt": 1769643214340,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "afalk42",
        "handle": "afalk42",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/6906332?v=4",
        "kind": "user",
        "linkedUserId": "kn70a6jnzq8dcsh761r40cc2hh803zsc"
    },
    "ownerHandle": "afalk42",
    "skill": {
        "_creationTime": 1769640285411,
        "_id": "kd7a9frjjhnrp9t8cr5266xxgs803686",
        "badges": [],
        "createdAt": 1769640285411,
        "displayName": "Reachy Mini",
        "latestVersionId": "k973eh1af7k4jse3xxaky07a9h802sr9",
        "ownerUserId": "kn70a6jnzq8dcsh761r40cc2hh803zsc",
        "slug": "reachy-mini",
        "stats": {
            "comments": 0,
            "downloads": 1808,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 2
        },
        "summary": "Control a Reachy Mini robot (by Pollen Robotics \/ Hugging Face) via its REST API and SSH. Use for any request involving the Reachy Mini robot — moving the head, body, or antennas; playing emotions or dances; capturing camera snapshots; adjusting volume; managing apps; checking robot status; or any physical robot interaction. The robot has a 6-DoF head, 360° body rotation, two animated antennas, a wide-angle camera (with non-disruptive WebRTC snapshot), 4-mic array, and speaker.",
        "tags": {
            "hugging face": "k973eh1af7k4jse3xxaky07a9h802sr9",
            "latest": "k973eh1af7k4jse3xxaky07a9h802sr9",
            "pollen": "k973eh1af7k4jse3xxaky07a9h802sr9",
            "reachy": "k973eh1af7k4jse3xxaky07a9h802sr9",
            "reachy mini": "k973eh1af7k4jse3xxaky07a9h802sr9",
            "robot": "k973eh1af7k4jse3xxaky07a9h802sr9",
            "robot body": "k973eh1af7k4jse3xxaky07a9h802sr9"
        },
        "updatedAt": 1774321711961
    }
}