59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code matches its stated purpose (request + poll Amazon Ads reports), but the package/registry metadata fails to declare the sensitive credentials and env var usage the scripts require — an...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772838884792,
        "_id": "k97bt2zfb2ydfhdfymvh7jcaj982d60k",
        "changelog": "Initial release with async Amazon Ads report retrieval:\n\n- Supports decoupled two-step process: request then poll for report\n- Handles Sponsored Products campaign performance via the v3 Reporting API\n- Prevents API timeouts by splitting report request and download for cron usage\n- Outputs summarized CSV with key campaign metrics\n- Requires no external npm dependencies (only Node.js built-ins)\n- Reads credentials from a JSON config file specified by an environment variable",
        "changelogSource": "auto",
        "createdAt": 1772838884792,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Zero2Ai",
        "handle": "zero2ai-hub",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/244362887?v=4",
        "kind": "user",
        "linkedUserId": "kn7dj907h1ps8kt92wbdspr01d820vzf"
    },
    "ownerHandle": "zero2ai-hub",
    "skill": {
        "_creationTime": 1772838884792,
        "_id": "kd77tw73krrfvrarcgtz00ymf582c358",
        "badges": [],
        "createdAt": 1772838884792,
        "displayName": "Amazon Ads Reporter",
        "latestVersionId": "k97bt2zfb2ydfhdfymvh7jcaj982d60k",
        "ownerUserId": "kn7dj907h1ps8kt92wbdspr01d820vzf",
        "slug": "skill-amazon-ads-reporter",
        "stats": {
            "comments": 0,
            "downloads": 162,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 1
        },
        "summary": "Fetch Amazon Ads Sponsored Products campaign reports asynchronously by requesting and polling separately to avoid API timeouts, with no npm dependencies.",
        "tags": {
            "latest": "k97bt2zfb2ydfhdfymvh7jcaj982d60k"
        },
        "updatedAt": 1772838901534
    }
}