100/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： clean

OpenClaw： benign

The skill's code, instructions, and requirements are coherent with its stated purpose (local supply-chain analysis of installed skills); it scans local skill directories, builds a graph, and optionall...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773473970915,
        "_id": "k9768q3ckr0bz1xsndh6709pgd82xpcw",
        "changelog": "Security\nFix TLS verification: Removed explicit disabling of SSL certificate verification (ssl.CERT_NONE, check_hostname = False) in _clawhub_get(). All requests to clawhub.ai now use the default SSL context, preventing man-in-the-middle exposure of credentials or API traffic.\nRemove credential dependency: Online enrichment no longer reads ~\/.codex\/auth.json. The clawhub API is public and does not require authentication; all token and Codex-related auth logic has been removed. No local credential files are read.\nChanges\nOnline enrichment: enrich works without any token or config. No CLAWHUB_TOKEN or auth file needed.\nCode cleanup: Removed load_auth_token(), unused import os, and the Authorization: Bearer header from clawhub requests. Docstring usage example updated.\nCompatibility\nBreaking: If you previously relied on ~\/.codex\/auth.json or CLAWHUB_TOKEN for enrich, that is no longer used or supported—enrich is now unauthenticated only. Behavior is otherwise unchanged; scan, enrich, analyze-all, and all analyze subcommands work as before.",
        "changelogSource": "user",
        "createdAt": 1773473970915,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "hyx-cn",
        "handle": "hyx-cn",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10544328?v=4",
        "kind": "user",
        "linkedUserId": "kn7cyb0thscketpmvbcdc2vy6d82t7eg"
    },
    "ownerHandle": "hyx-cn",
    "skill": {
        "_creationTime": 1773418061953,
        "_id": "kd78c9vc17632pt0vzne4xm6x182vbs8",
        "badges": [],
        "createdAt": 1773418061953,
        "displayName": "SkillChain",
        "latestVersionId": "k9768q3ckr0bz1xsndh6709pgd82xpcw",
        "ownerUserId": "kn7cyb0thscketpmvbcdc2vy6d82t7eg",
        "slug": "skill-chain",
        "stats": {
            "comments": 0,
            "downloads": 132,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 2
        },
        "summary": "Supply chain intelligence for OpenClaw skills. Use when analyzing the local skill ecosystem, understanding tool and package dependencies, discovering skill c...",
        "tags": {
            "latest": "k9768q3ckr0bz1xsndh6709pgd82xpcw"
        },
        "updatedAt": 1773474708183
    }
}