65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to implement a QLCoder 'pure-LLM' taint/triage workflow and mostly matches that purpose, but there are inconsistencies (mismatched skill naming and hard-coded developer paths) and th...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774611911669,
        "_id": "k976tp76c8xqnp6gf1spd7sdkx83q68t",
        "changelog": "Version 1.0.0 Summary: Major overhaul from SAT prep assistant to QLCoder Pure LLM taint-flow security analysis workflow.\n\n- Replaces all SAT-specific content and files with QLCoder pure-LLM taint-flow analysis for Java\/Python Web Apps.\n- Adds support for CVE sample manifest and local repository security workflows.\n- Introduces multi-profile source\/sink\/sanitizer typing and emits triaged findings summaries.\n- Provides quick start, detailed workflow instructions, references, and output contract for results.\n- Removes SAT topic files, college planning, and test prep logic in favor of security analysis documentation.",
        "changelogSource": "user",
        "createdAt": 1774611911669,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s170ex2jp44a5zcttkxpddwbmh83pyzw",
        "displayName": "SeTG-git",
        "handle": "setg-git",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/176371305?v=4",
        "kind": "user",
        "linkedUserId": "kn79vgvdmatv82mgj3any06r1183q31h"
    },
    "ownerHandle": "setg-git",
    "skill": {
        "_creationTime": 1774611911669,
        "_id": "kd74j4nyhh8s6g8z6t4jpy53ah83qdgw",
        "badges": [],
        "createdAt": 1774611911669,
        "displayName": "SATAgent",
        "latestVersionId": "k976tp76c8xqnp6gf1spd7sdkx83q68t",
        "ownerPublisherId": "s170ex2jp44a5zcttkxpddwbmh83pyzw",
        "ownerUserId": "kn79vgvdmatv82mgj3any06r1183q31h",
        "slug": "sat-agent",
        "stats": {
            "comments": 0,
            "downloads": 25,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Run the pure-LLM variant of the QLCoder workflow for both CVE samples and local Web App repositories. Supports multi-profile taint-flow analysis with source\/...",
        "tags": {
            "latest": "k976tp76c8xqnp6gf1spd7sdkx83q68t"
        },
        "updatedAt": 1774612309903
    }
}