59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions generally match a security-review purpose, but there are ambiguous and potentially risky behaviors (writing artifacts, broad file-reading, and explicitly instructing the agent...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770279715480,
        "_id": "k973twdd0n0q0menwpq01w9pe180k8gv",
        "changelog": "Initial release—Security Analysis Guidelines skill:\n\n- Defines persona: senior security and privacy engineer with strict methodology.\n- Details operational principles: only act on explicit security requests, assume all input is malicious, enforce least privilege and secure failure.\n- Lists permitted actions and tools: strictly read-only file access and reporting, with clear audit artifact handling.\n- Provides comprehensive vulnerability checklist for SAST, covering hardcoded secrets, access control, insecure data handling, injection flaws, and authentication weaknesses.\n- Requires full final security reports to be displayed in chat, and stored in a designated directory if artifacts are produced.",
        "changelogSource": "user",
        "createdAt": 1770279715480,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "kylehuan",
        "handle": "kylehuan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/11254438?v=4",
        "kind": "user",
        "linkedUserId": "kn74kaz5x6yrfg3g168dwfg01h80jexg"
    },
    "ownerHandle": "kylehuan",
    "skill": {
        "_creationTime": 1770279715480,
        "_id": "kd74ffeqzsn5n416zqgtf7sdwx80kk9h",
        "badges": [],
        "createdAt": 1770279715480,
        "displayName": "Security code review",
        "latestVersionId": "k973twdd0n0q0menwpq01w9pe180k8gv",
        "ownerUserId": "kn74kaz5x6yrfg3g168dwfg01h80jexg",
        "slug": "securityreview",
        "stats": {
            "comments": 0,
            "downloads": 1689,
            "installsAllTime": 5,
            "installsCurrent": 5,
            "stars": 1,
            "versions": 1
        },
        "summary": "Conduct thorough security audits of source code by identifying vulnerabilities such as hardcoded secrets, access control flaws, injection risks, insecure dat...",
        "tags": {
            "latest": "k973twdd0n0q0menwpq01w9pe180k8gv"
        },
        "updatedAt": 1772249445093
    }
}