47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's behavior mostly matches a SecondMe developer assistant, but it contains undocumented auto-update and local-write behaviors (npx-based update, saving client secrets, fetching docs) that are...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774255333367,
        "_id": "k976y8jat4b7cd7r7mkkywnmdx83e2rm",
        "changelog": "SecondMe Dev Assistant 2.0 — Initial Release\n\n- Unified skill for managing the entire lifecycle of SecondMe third-party app and integration development.\n- Covers app bootstrap, credential management, requirements definition, scaffolding, guidance on OAuth\/MCP, and review submission.\n- Supports direct control-plane operations on SecondMe Develop, including app\/integration CRUD, validation, and release.\n- Triggers on key developer intents such as \"create SecondMe app,\" \"OAuth,\" \"integration,\" or participation in a hackathon.\n- Implements a silent, automatic update check on first use per conversation.\n- Enforces precise, secure, and transparent guidance; never produces raw secrets or performs unsafe actions.",
        "changelogSource": "auto",
        "createdAt": 1774255333367,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Mindverse",
        "handle": "daihaochen-mv",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/249059989?v=4",
        "kind": "user",
        "linkedUserId": "kn7a6swqykfhnj23gy2tfv435s830n4v"
    },
    "ownerHandle": "daihaochen-mv",
    "skill": {
        "_creationTime": 1774255333367,
        "_id": "kd7624dh7y6pk31wx4d9qc8gnh83f6z7",
        "badges": [],
        "createdAt": 1774255333367,
        "displayName": "Secondme Dev Assistant",
        "latestVersionId": "k976y8jat4b7cd7r7mkkywnmdx83e2rm",
        "ownerUserId": "kn7a6swqykfhnj23gy2tfv435s830n4v",
        "slug": "secondme-dev-assistant",
        "stats": {
            "comments": 0,
            "downloads": 15,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Guides SecondMe third-party app and integration development from creation to review submission, covering app bootstrap, Client ID\/Secret, requirements, scaff...",
        "tags": {
            "latest": "k976y8jat4b7cd7r7mkkywnmdx83e2rm"
        },
        "updatedAt": 1774256215829
    }
}