94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill's requested capabilities, tools, and runtime instructions are coherent with an auditor that fetches and analyses skill dependency metadata; nothing requested appears disproportionate or unre...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771856891773,
        "_id": "k9703x2a5rgz556ekm2gz5z8n981p3v9",
        "changelog": "Initial release of skill-dependency-chain-auditor.\n\n- Audits transitive dependency chains for agent skills, exposing hidden vulnerabilities.\n- Detects trust gradients, version pinning issues, and shared\/circular\/diamond dependency patterns.\n- Provides full inventory of transitive dependencies with trust level assessments.\n- Analyzes aggregated capabilities and flags undeclared permission propagation.\n- Outputs a detailed audit report with actionable recommendations and a chain integrity verdict.",
        "changelogSource": "auto",
        "createdAt": 1771856891773,
        "parsed": {
            "clawdis": {
                "emoji": "⛓️",
                "requires": {
                    "bins": [
                        "curl",
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "andyxinweiminicloud",
        "handle": "andyxinweiminicloud",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/201528876?v=4",
        "kind": "user",
        "linkedUserId": "kn774taf7vj1tv67nx5x4aaccx81k63s"
    },
    "ownerHandle": "andyxinweiminicloud",
    "skill": {
        "_creationTime": 1771856891773,
        "_id": "kd77qzn9ch9kb23nqswbxkj0c581qgh0",
        "badges": [],
        "createdAt": 1771856891773,
        "displayName": "Skill Dependency Chain Auditor",
        "latestVersionId": "k9703x2a5rgz556ekm2gz5z8n981p3v9",
        "ownerUserId": "kn774taf7vj1tv67nx5x4aaccx81k63s",
        "slug": "skill-dependency-chain-auditor",
        "stats": {
            "comments": 0,
            "downloads": 299,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Helps audit transitive skill dependency chains in agent compositions — catching the class of risk where a skill's direct dependencies appear safe but a depen...",
        "tags": {
            "latest": "k9703x2a5rgz556ekm2gz5z8n981p3v9"
        },
        "updatedAt": 1772064640938
    }
}