59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill’s behavior mostly matches a SignalHire integration, but there are inconsistencies (missing declared env vars in the registry, code files with no install instructions) and modest operational ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770198903542,
        "_id": "k97ech1wd23fgf2em8fed67aa980h43r",
        "changelog": "The SignalHire skill integrates the full SignalHire API into OpenClaw, enabling you to search for prospects and enrich their contact details without leaving your workflow. It exposes three core actions: a credits check, a search-by-query for prospecting, and an asynchronous contact enrichment call. The credits check invokes SignalHire’s \/api\/v1\/credits endpoint to report how many credits you have left, while the search action uses the searchByQuery endpoint to filter candidates by title, location, industry and other fields. Access to the search API requires contacting SignalHire and is limited to three concurrent requests.\n\nThe enrichment action calls the Person API (\/api\/v1\/candidate\/search) with up to 100 identifiers and a callback URL. SignalHire returns results asynchronously to your callback; your server must reply with HTTP 200 within a 10‑second window or SignalHire will retry and eventually discard the request. Each callback object includes a status (success, failed, credits_are_over, timeout_exceeded or duplicate_query) and, on success, a candidate with fields like fullName, emails, phones and locations. The skill includes a small Flask connector that listens on the callback endpoint, writes results into per‑job and consolidated CSV files, and exposes a job-status API so your agent knows when to proceed.",
        "changelogSource": "user",
        "createdAt": 1770198903542,
        "parsed": {
            "clawdis": {
                "primaryEnv": "SIGNALHIRE_API_KEY",
                "requires": {
                    "env": [
                        "SIGNALHIRE_API_KEY",
                        "SIGNALHIRE_CALLBACK_URL"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ms-youssef",
        "handle": "ms-youssef",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/64752958?v=4",
        "kind": "user",
        "linkedUserId": "kn776naxw6eehs7q16s8b9yh5d8091xn"
    },
    "ownerHandle": "ms-youssef",
    "skill": {
        "_creationTime": 1770198903542,
        "_id": "kd714p8wr371kcwkjdqa6rh9ws80hjqb",
        "badges": [],
        "createdAt": 1770198903542,
        "displayName": "The SignalHire skill integrates the full SignalHire API into OpenClaw, enabling you to search for prospects and enrich their contact details without leaving your workflow. It exposes three core actions: a credits check, a search-by-query for prospecting, and an asynchronous contact enrichment call",
        "latestVersionId": "k97ech1wd23fgf2em8fed67aa980h43r",
        "ownerUserId": "kn776naxw6eehs7q16s8b9yh5d8091xn",
        "slug": "signalhire-skill",
        "stats": {
            "comments": 0,
            "downloads": 2011,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "Prospect and enrich contacts via the SignalHire API (Search, Person and Credits)",
        "tags": {
            "latest": "k97ech1wd23fgf2em8fed67aa980h43r"
        },
        "updatedAt": 1772249214655
    }
}