59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill is plausibly a skill-auditor, but there are several mismatches and privacy risks (undeclared required binaries, optional LLM step that copies suspicious code to /tmp, and an external report ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770506204688,
        "_id": "k97bptxargtfv4wc7223kn7pcd80pjdj",
        "changelog": "Fix: updated ClawHub listing description to English.",
        "changelogSource": "user",
        "createdAt": 1770506204688,
        "version": "2.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "sypsyp97",
        "handle": "sypsyp97",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/17694291?v=4",
        "kind": "user",
        "linkedUserId": "kn73dph7k14b0va24cbb29a2xs80nyp9"
    },
    "ownerHandle": "sypsyp97",
    "skill": {
        "_creationTime": 1770506094697,
        "_id": "kd7656m9xfwq91q4sxdf5655sh80qby4",
        "badges": [],
        "createdAt": 1770506094697,
        "displayName": "Skill Auditor Pro",
        "latestVersionId": "k97bptxargtfv4wc7223kn7pcd80pjdj",
        "ownerUserId": "kn73dph7k14b0va24cbb29a2xs80nyp9",
        "slug": "skill-auditor-pro",
        "stats": {
            "comments": 0,
            "downloads": 1544,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 3,
            "versions": 3
        },
        "summary": "审查 ClawHub skills 的安全性，检测恶意代码、可疑模式和社工攻击。在安装任何第三方 skill 前使用此工具进行安全检查。",
        "tags": {
            "latest": "k97bptxargtfv4wc7223kn7pcd80pjdj"
        },
        "updatedAt": 1774295960113
    }
}