41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and instructions broadly match its stated purpose (using a gitmcp.io MCP service to read repos), but it delegates work to an external service and invokes npx at runtime without pinnin...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1768960965185,
        "_id": "k974whhyexdzc28zpgdm9hgqbn7zmg4g",
        "changelog": "Improved description - explains why gitmcp.io beats raw GitHub scraping",
        "changelogSource": "user",
        "createdAt": 1768960965185,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "am-will",
        "handle": "am-will",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/42459108?v=4",
        "kind": "user",
        "linkedUserId": "kn71yaeagtfnne2ae9s6q82h2n7z65f9"
    },
    "ownerHandle": "am-will",
    "skill": {
        "_creationTime": 1768960901195,
        "_id": "kd78sdvndwm57f05fw4gzyfgan7zmtjh",
        "badges": [],
        "createdAt": 1768960901195,
        "displayName": "Read GitHub",
        "latestVersionId": "k974whhyexdzc28zpgdm9hgqbn7zmg4g",
        "ownerUserId": "kn71yaeagtfnne2ae9s6q82h2n7z65f9",
        "slug": "read-github",
        "stats": {
            "comments": 0,
            "downloads": 3684,
            "installsAllTime": 27,
            "installsCurrent": 24,
            "stars": 3,
            "versions": 2
        },
        "summary": "Read GitHub repos the RIGHT way - via gitmcp.io instead of raw scraping. Why this beats web search: (1) Semantic search across docs, not just keyword matching, (2) Smart code navigation with accurate file structure - zero hallucinations on repo layout, (3) Proper markdown output optimized for LLMs, not raw HTML\/JSON garbage, (4) Aggregates README + \/docs + code in one clean interface, (5) Respects rate limits and robots.txt. Stop pasting raw GitHub URLs - use this instead.",
        "tags": {
            "latest": "k974whhyexdzc28zpgdm9hgqbn7zmg4g"
        },
        "updatedAt": 1774321363202
    }
}