65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's description and SKILL.md promise a signed, append-only CLI-backed logger, but the package contains no CLI implementation, no install instructions, and no key-management details needed for ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773763640218,
        "_id": "k976078cdc7abxw2mbrmy1d9qs833nrc",
        "changelog": "Initial release of Receipt Logger.\n\n- Adds append-only, cryptographically signed audit logs for agent actions.\n- Each log entry includes timestamp, action details, hash, and signature for verification.\n- CLI commands support logging, listing, verifying, and exporting receipts as JSON.\n- Ensures logs are tamper-evident and exportable for external verification.\n- Implements zero external dependencies with pure shell and JSON output.",
        "changelogSource": "auto",
        "createdAt": 1773763640218,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jiuge897",
        "handle": "jiuge897",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/57371395?v=4",
        "kind": "user",
        "linkedUserId": "kn74jegbdzszqqnkqex2vsxjqs82hp6r"
    },
    "ownerHandle": "jiuge897",
    "skill": {
        "_creationTime": 1773763640218,
        "_id": "kd78qyxa627j58apr3p537kjfs833z9j",
        "badges": [],
        "createdAt": 1773763640218,
        "displayName": "Receipt Logger",
        "latestVersionId": "k976078cdc7abxw2mbrmy1d9qs833nrc",
        "ownerUserId": "kn74jegbdzszqqnkqex2vsxjqs82hp6r",
        "slug": "receipt-logger",
        "stats": {
            "comments": 0,
            "downloads": 50,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Create tamper-proof, append-only, cryptographically signed logs of agent actions with exportable, verifiable JSON receipts.",
        "tags": {
            "audit": "k976078cdc7abxw2mbrmy1d9qs833nrc",
            "latest": "k976078cdc7abxw2mbrmy1d9qs833nrc",
            "logging": "k976078cdc7abxw2mbrmy1d9qs833nrc",
            "memory": "k976078cdc7abxw2mbrmy1d9qs833nrc",
            "receipt": "k976078cdc7abxw2mbrmy1d9qs833nrc",
            "trust": "k976078cdc7abxw2mbrmy1d9qs833nrc"
        },
        "updatedAt": 1774336354738
    }
}