47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose and requested permissions are largely coherent, but it executes remote npm code at runtime (via npx) that must be trusted — that raises non-trivial risk that the fetched cod...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774195426621,
        "_id": "k971qjxx9qepcq8a6bq3bcwb9d83dsj2",
        "changelog": "Security hardening: rewrite Security section addressing all 6 ClawHub scan findings (runtime dependency disclosure, verifiable claims, SHA-512 integrity hash, credential scope, write operation boundaries). Add Apache-2.0 LICENSE file. Source code audit links.",
        "changelogSource": "user",
        "createdAt": 1774195426621,
        "parsed": {
            "clawdis": {
                "author": "rotifer-protocol"
            }
        },
        "version": "2.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "xiaoba-dev",
        "handle": "web3coderman-dev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/229576266?v=4",
        "kind": "user",
        "linkedUserId": "kn7ec5m4jmk1h4jyzfrxaesjk9838ykv"
    },
    "ownerHandle": "web3coderman-dev",
    "skill": {
        "_creationTime": 1774194403101,
        "_id": "kd74djfw13mcaq0edq8jgrhgcn83dxmp",
        "badges": [],
        "createdAt": 1774194403101,
        "displayName": "Rotifer Openclaw Skill",
        "latestVersionId": "k971qjxx9qepcq8a6bq3bcwb9d83dsj2",
        "ownerUserId": "kn7ec5m4jmk1h4jyzfrxaesjk9838ykv",
        "slug": "rotifer-evolving-agent",
        "stats": {
            "comments": 0,
            "downloads": 22,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Your Agent evolves itself — scans capabilities, benchmarks against Arena rankings, and upgrades automatically",
        "tags": {
            "latest": "k971qjxx9qepcq8a6bq3bcwb9d83dsj2"
        },
        "updatedAt": 1774199207150
    }
}