47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill appears to be what it claims (a Terraform-based multi-cloud red-team deployment helper) but its metadata under-declares required credentials and the runtime instructions admit templates can ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773218607589,
        "_id": "k97eqs2k181jf0s5naay4cvers82qtes",
        "changelog": "Version 1.0.3\n\n- Clarified credential usage: metadata now declares Alibaba Cloud env vars as an example, with guidance to only configure credentials for the single provider in use.\n- Updated SKILL.md with a strong security notice: always inspect templates and use `plan_case` before deployment.\n- Added step-by-step instructions for template safety and auditing.\n- Expanded documentation on binary verification and MCP server exposure.\n- Minor improvements to provider\/env var documentation for clarity and security best practices.",
        "changelogSource": "user",
        "createdAt": 1773218607589,
        "parsed": {
            "clawdis": {
                "emoji": "🔴",
                "homepage": "https:\/\/github.com\/wgpsec\/redc",
                "os": [
                    "macos",
                    "linux",
                    "windows"
                ],
                "requires": {
                    "bins": [
                        "redc",
                        "terraform"
                    ],
                    "env": [
                        "ALICLOUD_ACCESS_KEY",
                        "ALICLOUD_SECRET_KEY"
                    ]
                }
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "r0fus0d",
        "handle": "no-github",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/18167071?v=4",
        "kind": "user",
        "linkedUserId": "kn7dy4zqdgg8pqpcrmnxdjyk4582p5ay"
    },
    "ownerHandle": "no-github",
    "skill": {
        "_creationTime": 1773216941710,
        "_id": "kd76pjm6t4ef9k5w41jqn26v8s82qc5v",
        "badges": [],
        "createdAt": 1773216941710,
        "displayName": "redc",
        "latestVersionId": "k97eqs2k181jf0s5naay4cvers82qtes",
        "ownerUserId": "kn7dy4zqdgg8pqpcrmnxdjyk4582p5ay",
        "slug": "redc",
        "stats": {
            "comments": 0,
            "downloads": 149,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 4
        },
        "summary": "Red team infrastructure multi-cloud automated deployment tool. Deploy, manage, and monitor cloud instances across Alibaba Cloud, AWS, Tencent Cloud, Volcengi...",
        "tags": {
            "latest": "k97eqs2k181jf0s5naay4cvers82qtes"
        },
        "updatedAt": 1774331809821
    }
}