59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The SKILL.md instructs the agent to run local Python validation scripts and to install the skill, but the package contains no code or install spec and does not declare required binaries (python3) — th...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770912947946,
        "_id": "k976xsr7vebzefwc24nwf2brhd810ssw",
        "changelog": "- Initial release of doctorbot-ci-validator.\n- Provides offline, deterministic validation for CI\/CD workflow files (GitHub Actions, GitLab CI, Keep, and more).\n- Supports both full-featured workflow logic validation and fast YAML syntax checks.\n- No environment dependencies—no live databases or networks required.\n- Includes command-line scripts for file and directory validation.\n- Suitable for pre-commit hooks, CI\/CD pipelines, and agent-based code generation.",
        "changelogSource": "auto",
        "createdAt": 1770912947946,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "bamontejano",
        "handle": "bamontejano",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/209756837?v=4",
        "kind": "user",
        "linkedUserId": "kn78tws6sbz98n1krqcb16zdv58100mr"
    },
    "ownerHandle": "bamontejano",
    "skill": {
        "_creationTime": 1770912947946,
        "_id": "kd7467dy1exfe83j1dgvm4jsf9811g5r",
        "badges": [],
        "createdAt": 1770912947946,
        "displayName": "Doctorbot Ci Validator",
        "latestVersionId": "k976xsr7vebzefwc24nwf2brhd810ssw",
        "ownerUserId": "kn78tws6sbz98n1krqcb16zdv58100mr",
        "slug": "skill-doctorbot-ci-validator",
        "stats": {
            "comments": 0,
            "downloads": 611,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Stop failing in production. Validate your GitHub Actions, GitLab CI & Keep workflows offline with surgical precision. Born from Keep bounty research, perfected for agents.",
        "tags": {
            "latest": "k976xsr7vebzefwc24nwf2brhd810ssw"
        },
        "updatedAt": 1772337438332
    }
}