37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly does what it claims (call a local /chat_direct API) but contains inconsistencies in its docs and unsafe command construction that can allow shell/URL injection and contact to arbitrar...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.install_untrusted_source

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773888392731,
        "_id": "k97ae8s5wkdezqztjnrfejn9jx836sj6",
        "changelog": "shuttle-ai-chatbot v2.0.1\n\n- 技能 slug 更名：從 shuttle-qc-ai-chatbot 改為 shuttle-ai-chatbot\n- 發布至 ClawHub，正式上架",
        "changelogSource": "auto",
        "createdAt": 1773888392731,
        "version": "2.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "https:\/\/github.com\/account\/ssh",
        "handle": "sean810720",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/888016?v=4",
        "kind": "user",
        "linkedUserId": "kn7byrtze0g8xab6pn9dccawp581r85z"
    },
    "ownerHandle": "sean810720",
    "skill": {
        "_creationTime": 1773888392731,
        "_id": "kd78d54e12b4je6xntr4yb0byn837ta0",
        "badges": [],
        "createdAt": 1773888392731,
        "displayName": "Shuttle AI Chatbot",
        "latestVersionId": "k97ae8s5wkdezqztjnrfejn9jx836sj6",
        "ownerUserId": "kn7byrtze0g8xab6pn9dccawp581r85z",
        "slug": "shuttle-ai-chatbot",
        "stats": {
            "comments": 0,
            "downloads": 49,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "直接調用本地 AI \/chat_direct API，支援單次與批次查詢，產品比較，輸出 JSON 或純文字，無需瀏覽器自動化。",
        "tags": {
            "latest": "k97ae8s5wkdezqztjnrfejn9jx836sj6"
        },
        "updatedAt": 1774337598843
    }
}