59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions and required tools generally match a vetting purpose, but metadata inconsistencies (name/slug/owner mismatches) and an undeclared dependency on the 'clawhub' CLI are concernin...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772602763906,
        "_id": "k979bqf39zqj7d78bhxrp670cs828vg4",
        "changelog": "Initial release of Security Skill Scanner – skill-vetter.\n\n- Provides a systematic security vetting protocol for AI agent skills before installation.\n- Detects red flags such as credential theft, obfuscated code, and unauthorized exfiltration.\n- Classifies risk as LOW, MEDIUM, HIGH, or EXTREME, with clear install recommendations.\n- Includes detailed checklists and report templates for consistent vetting.\n- Supports vetting for skills from ClawHub and GitHub; includes practical code review commands.\n- Strongly advises never installing untrusted skills without running this process first.",
        "changelogSource": "user",
        "createdAt": 1772602763906,
        "parsed": {
            "clawdis": {
                "emoji": "🔒",
                "os": [
                    "linux",
                    "darwin",
                    "win32"
                ],
                "requires": {
                    "bins": [
                        "curl",
                        "jq"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "firebroo",
        "handle": "firebroo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7047962?v=4",
        "kind": "user",
        "linkedUserId": "kn7cqdadxqp08jw67vqvtp56g5828gs0"
    },
    "ownerHandle": "firebroo",
    "skill": {
        "_creationTime": 1772602763906,
        "_id": "kd7a4691xgwsm4deb123ch36s9829zbn",
        "badges": [],
        "createdAt": 1772602763906,
        "displayName": "security-skiil-scanner",
        "latestVersionId": "k979bqf39zqj7d78bhxrp670cs828vg4",
        "ownerUserId": "kn7cqdadxqp08jw67vqvtp56g5828gs0",
        "slug": "security-skiil-scanner",
        "stats": {
            "comments": 0,
            "downloads": 178,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Security vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification L...",
        "tags": {
            "latest": "k979bqf39zqj7d78bhxrp670cs828vg4"
        },
        "updatedAt": 1772602775647
    }
}