41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly matches its stated audit purpose, but there are several inconsistencies and risky behaviors (prompt-injection patterns in SKILL.md, implicit local file reads, and automated serving of...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770537604958,
        "_id": "k97996aemjqa5146kfj2tv1xyn80r1wa",
        "changelog": "secucheck 2.8.0\n\n- Improved handling and documentation for failed security checks by adding platform-specific fallback commands.\n- Enhanced cross-platform compatibility with clearer instructions for Linux, macOS, WSL, Windows, and DSM environments.\n- Expanded agent instructions on fallback procedures for minimal environments and missing tools.\n- Documentation updates in SKILL.md for platform detection fields and fallback workflow.\n- No core features changed; this is a workflow and documentation enhancement release.",
        "changelogSource": "auto",
        "createdAt": 1770537604958,
        "version": "2.8.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Joonyoung Park",
        "handle": "jooneyp",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/4610410?v=4",
        "kind": "user",
        "linkedUserId": "kn7c92f305hxwpvjg5pb841qh580bw2m"
    },
    "ownerHandle": "jooneyp",
    "skill": {
        "_creationTime": 1770527766190,
        "_id": "kd74k68jtjy6hqpe9485gdwq6580s383",
        "badges": [],
        "createdAt": 1770527766190,
        "displayName": "Secucheck",
        "latestVersionId": "k97996aemjqa5146kfj2tv1xyn80r1wa",
        "ownerUserId": "kn7c92f305hxwpvjg5pb841qh580bw2m",
        "slug": "secucheck",
        "stats": {
            "comments": 0,
            "downloads": 2854,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 4,
            "versions": 15
        },
        "summary": "Comprehensive security audit for OpenClaw. Scans 7 domains (runtime, channels, agents, cron, skills, sessions, network), supports 3 expertise levels, context-aware analysis, and visual dashboard. Read-only with localized reports.",
        "tags": {
            "latest": "k97996aemjqa5146kfj2tv1xyn80r1wa"
        },
        "updatedAt": 1774323272601
    }
}