55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill largely does what its description says (build a Notion-backed report and send it via Telegram), but it fails to declare required credentials and executes local/other-skill scripts—behavior t...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774777341963,
        "_id": "k970t9v8d9t8gyjg5wpf58gb9s83v2by",
        "changelog": "Initial publish",
        "changelogSource": "user",
        "createdAt": 1774777341963,
        "parsed": {
            "clawdis": {
                "emoji": "📨",
                "requires": {
                    "bins": [
                        "node",
                        "openclaw"
                    ]
                }
            }
        },
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17fbnv9nhnpad1tkqr4ch2y0983pdyq",
        "displayName": "omermesebuken1",
        "handle": "omermesebuken1",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/76281192?v=4",
        "kind": "user",
        "linkedUserId": "kn7a2nfn2kmzb9k522vcyqchtn83bc76"
    },
    "ownerHandle": "omermesebuken1",
    "skill": {
        "_creationTime": 1774777341963,
        "_id": "kd7eywk9mscj1hsqe53t1zjcbx83tqkr",
        "badges": [],
        "createdAt": 1774777341963,
        "displayName": "Report Builder",
        "latestVersionId": "k970t9v8d9t8gyjg5wpf58gb9s83v2by",
        "ownerPublisherId": "s17fbnv9nhnpad1tkqr4ch2y0983pdyq",
        "ownerUserId": "kn7a2nfn2kmzb9k522vcyqchtn83bc76",
        "slug": "report-builder",
        "stats": {
            "comments": 0,
            "downloads": 18,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Use when the main operator needs to turn the nightly shortlist into a Telegram morning report with inline approve\/reject\/later buttons.",
        "tags": {
            "factory": "k970t9v8d9t8gyjg5wpf58gb9s83v2by",
            "latest": "k970t9v8d9t8gyjg5wpf58gb9s83v2by",
            "telegram": "k970t9v8d9t8gyjg5wpf58gb9s83v2by"
        },
        "updatedAt": 1774780010901
    }
}