59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code matches its stated purpose (request + poll Amazon Ads reports), but the package/registry metadata fails to declare the sensitive credentials and env var usage the scripts require — an...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774739676162,
        "_id": "k973kycmdpy6bbhd2ggkf8wdq583sy4d",
        "changelog": "**Expanded functionality: adds keyword analytics and live bid inspection tools.**\n\n- Introduced `keyword-report.js` for keyword-level winner\/dead analysis across campaigns.\n- Added `get-bids.js` script for instant, live export of all keywords and bids (enabled and paused).\n- Updated configuration to support required Amazon Ads refresh\/key fields.\n- Removed old reporting scripts and references; documentation now covers new keyword features.\n- Clarified output formats for both campaign and keyword-level reports.",
        "changelogSource": "auto",
        "createdAt": 1774739676162,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17a1b8dv4hc6x68q9m057m67n83ryrt",
        "displayName": "Zero2Ai",
        "handle": "zero2ai-hub",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/244362887?v=4",
        "kind": "user",
        "linkedUserId": "kn7dj907h1ps8kt92wbdspr01d820vzf"
    },
    "ownerHandle": "zero2ai-hub",
    "skill": {
        "_creationTime": 1772838884792,
        "_id": "kd77tw73krrfvrarcgtz00ymf582c358",
        "badges": [],
        "createdAt": 1772838884792,
        "displayName": "Amazon Ads Reporter",
        "latestVersionId": "k973kycmdpy6bbhd2ggkf8wdq583sy4d",
        "ownerPublisherId": "s17a1b8dv4hc6x68q9m057m67n83ryrt",
        "ownerUserId": "kn7dj907h1ps8kt92wbdspr01d820vzf",
        "slug": "skill-amazon-ads-reporter",
        "stats": {
            "comments": 0,
            "downloads": 204,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 2
        },
        "summary": "Fetch Amazon Ads Sponsored Products campaign reports asynchronously by requesting and polling separately to avoid API timeouts, with no npm dependencies.",
        "tags": {
            "latest": "k973kycmdpy6bbhd2ggkf8wdq583sy4d"
        },
        "updatedAt": 1774762668107
    }
}