37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's purpose (fetching transactions from SimpleFIN) matches the included code and instructions, but there are several coherence and security concerns (undeclared env references, storing sensiti...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774305913066,
        "_id": "k972648qd1skgmyc1dmp7c7x8183fc3n",
        "changelog": "Added developer API reference guide",
        "changelogSource": "user",
        "createdAt": 1774305913066,
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s173v5nncrn4twk8aykszn2tr583et7r",
        "displayName": "eladrave",
        "handle": "eladrave",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/86946294?v=4",
        "kind": "user",
        "linkedUserId": "kn7fya121r8davxnbkw7qgb8xs80h28d"
    },
    "ownerHandle": "eladrave",
    "skill": {
        "_creationTime": 1774305532298,
        "_id": "kd71n8ctkz9x0beknp263tv7rs83fca9",
        "badges": [],
        "createdAt": 1774305532298,
        "displayName": "SimpleFIN Bank Connection",
        "latestVersionId": "k972648qd1skgmyc1dmp7c7x8183fc3n",
        "ownerPublisherId": "s173v5nncrn4twk8aykszn2tr583et7r",
        "ownerUserId": "kn7fya121r8davxnbkw7qgb8xs80h28d",
        "slug": "simplefin",
        "stats": {
            "comments": 0,
            "downloads": 16,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Connects to bank accounts and fetches financial transactions via the SimpleFIN API. Use when the user wants to check bank balances, review recent transaction...",
        "tags": {
            "latest": "k972648qd1skgmyc1dmp7c7x8183fc3n"
        },
        "updatedAt": 1774309908883
    }
}