55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and instructions legitimately need Redmine and OpenAI credentials and Node, but the registry metadata omits those requirements and the skill will upload issue attachments to an extern...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774431005765,
        "_id": "k97d3e6d4r13vs43hj36qkendn83j7ss",
        "changelog": "- Initial release of redmine-tools with CLI support.\n- Fetch Redmine issues (including attachments and journals).\n- Update issues with new status and\/or notes.\n- Summarize image attachments using an OpenAI-compatible API.\n- All configuration via environment variables; outputs JSON to stdout.\n- Handles only supported image types and reports unsupported files.",
        "changelogSource": "user",
        "createdAt": 1774431005765,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1706ftd0hzg1nwdvertxczqps83kbzh",
        "displayName": "yinxianwei",
        "handle": "yinxianwei",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7708576?v=4",
        "kind": "user",
        "linkedUserId": "kn7fbtyt9ee8fz5gsd9yw4bwy583kmjf"
    },
    "ownerHandle": "yinxianwei",
    "skill": {
        "_creationTime": 1774431005765,
        "_id": "kd75ed29fj118n72fe0n0zrwh583kzn6",
        "badges": [],
        "createdAt": 1774431005765,
        "displayName": "redmine-tools",
        "latestVersionId": "k97d3e6d4r13vs43hj36qkendn83j7ss",
        "ownerPublisherId": "s1706ftd0hzg1nwdvertxczqps83kbzh",
        "ownerUserId": "kn7fbtyt9ee8fz5gsd9yw4bwy583kmjf",
        "slug": "redmine-tools",
        "stats": {
            "comments": 0,
            "downloads": 13,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Fetch, update, and summarize Redmine issue attachments from CLI.",
        "tags": {
            "latest": "k97d3e6d4r13vs43hj36qkendn83j7ss"
        },
        "updatedAt": 1774438011398
    }
}