59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's checks and PowerShell-based guidance line up with a SecOps endpoint assessor, but it contains unclear instructions to hash other skills, store hashes, and 'emit' alerts without specifying ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770126581525,
        "_id": "k978jfa21bq0j9vfewa2ghr6kd80eyb2",
        "changelog": "Security Joes AI Analyst 1.0.0 – Initial Release\n\n- Provides an AI-driven SecOps checklist for Windows endpoints, focusing on EDR, Sysmon, system updates, event log (EVTX) monitoring, least privilege enforcement, network visibility, and credential protection.\n- Supports weekly automated security posture assessments and reporting, including vulnerability inventory and alerts on known CVEs.\n- Implements skill integrity checking via hash verification to detect unexpected changes or potential skill compromise.\n- Designed for use in endpoint health reviews, collector\/heartbeat logic, credential hardening, and healthy endpoint dashboard reviews.\n\n",
        "changelogSource": "user",
        "createdAt": 1770126581525,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "inaor",
        "handle": "inaor",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5854549?v=4",
        "kind": "user",
        "linkedUserId": "kn72kpt04meyz5wctd95zvna3n80e4yd"
    },
    "ownerHandle": "inaor",
    "skill": {
        "_creationTime": 1770126581525,
        "_id": "kd7ehzhggswv5g918mntdraaas80f02r",
        "badges": [],
        "createdAt": 1770126581525,
        "displayName": "A SecOps expert to handle security issues, ensure that protections are in place and collect evidence for security analysis. The Skill also contains skill integrity checks.",
        "latestVersionId": "k978jfa21bq0j9vfewa2ghr6kd80eyb2",
        "ownerUserId": "kn72kpt04meyz5wctd95zvna3n80e4yd",
        "slug": "secops-by-joes",
        "stats": {
            "comments": 0,
            "downloads": 1911,
            "installsAllTime": 8,
            "installsCurrent": 7,
            "stars": 3,
            "versions": 1
        },
        "summary": "Perform SecOps endpoint checks for EDR, Sysmon, updates, EVTX alerts, least privilege, network exposure, credential protection, vulnerabilities, weekly asses...",
        "tags": {
            "latest": "k978jfa21bq0j9vfewa2ghr6kd80eyb2"
        },
        "updatedAt": 1772249057409
    }
}