41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally does what it says (cache remote skills), but it performs risky operations (downloads arbitrary remote code, disables SSL verification, creates symlinks into the agent's skills fold...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771858955568,
        "_id": "k979hc19kpk207xbvk1dyavyf581q467",
        "changelog": "Cache and use skills from ClawHub\/GitHub as if locally installed. Includes batch caching, offline mode, auto-symlink to skills folder.",
        "changelogSource": "user",
        "createdAt": 1771858955568,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "om yarewara",
        "handle": "oki3505f",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/186946154?v=4",
        "kind": "user",
        "linkedUserId": "kn7ffxatz674ge4ed1k9hfkhg980acp1"
    },
    "ownerHandle": "oki3505f",
    "skill": {
        "_creationTime": 1771858955568,
        "_id": "kd7236fbxd7gy6byrq1b3g2rdx81q639",
        "badges": [],
        "createdAt": 1771858955568,
        "displayName": "Remote Skill Engine",
        "latestVersionId": "k979hc19kpk207xbvk1dyavyf581q467",
        "ownerUserId": "kn7ffxatz674ge4ed1k9hfkhg980acp1",
        "slug": "remote-skill-engine",
        "stats": {
            "comments": 0,
            "downloads": 405,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 2,
            "versions": 1
        },
        "summary": "Cache and use skills from ClawHub and GitHub as if locally installed. Stores remote skills in local cache folder for offline use.",
        "tags": {
            "latest": "k979hc19kpk207xbvk1dyavyf581q467"
        },
        "updatedAt": 1774326602066
    }
}