46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

The skill's stated purpose (a Nostr bridge) matches the files and instructions, but the Node bridge contains an unsafe shell exec of user messages and other small mismatches (undeclared env vars, reco...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774769021460,
        "_id": "k972hy7xagcz0a1qmcycadzbk983vbq3",
        "changelog": "Added client connection guide: iPhone, CLI, Mac, Damus interop, QR sharing",
        "changelogSource": "user",
        "createdAt": 1774769021460,
        "parsed": {
            "clawdis": {
                "emoji": "⚡"
            }
        },
        "version": "0.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s176gfykamb64wdjw72tp8jbk983ts92",
        "displayName": "lmanchu",
        "handle": "lmanchu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8541873?v=4",
        "kind": "user",
        "linkedUserId": "kn7f6bp2cdc9bxwscs9be11tbh81w9eh"
    },
    "ownerHandle": "lmanchu",
    "skill": {
        "_creationTime": 1774768113553,
        "_id": "kd7792p28xd13ykz9skw5mgmr983v019",
        "badges": [],
        "createdAt": 1774768113553,
        "displayName": "Sigil Nostr — P2P Encrypted Messaging for AI Agents",
        "latestVersionId": "k972hy7xagcz0a1qmcycadzbk983vbq3",
        "ownerPublisherId": "s176gfykamb64wdjw72tp8jbk983ts92",
        "ownerUserId": "kn7f6bp2cdc9bxwscs9be11tbh81w9eh",
        "slug": "sigil-nostr",
        "stats": {
            "comments": 0,
            "downloads": 11,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Nostr P2P messaging gateway for AI agents. Send and receive E2E encrypted messages via the Nostr protocol. Enables your agent to be reachable from Sigil Mess...",
        "tags": {
            "latest": "k972hy7xagcz0a1qmcycadzbk983vbq3"
        },
        "updatedAt": 1774769039945
    }
}