55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's behavior mostly matches a gateway for executing/polling and uploading attachments, but it reads arbitrary local file paths and sends telemetry (potentially including auth context) to an ex...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773329156092,
        "_id": "k97em436da88vb9vt1tqtjqdzs82rans",
        "changelog": "- Added `\/api\/blob\/upload-file` as a fallback upload endpoint for `file_path` inputs when `@vercel\/blob\/client` is unavailable.\n- Enhanced `portal.skill.presentation` to render output files and return `visual.files.assets`, including overlay, mask, and cutout URLs.\n- Audio outputs now normalize to `output.media_files.assets` with uploaded file URLs when blob storage is available.\n- No breaking changes.",
        "changelogSource": "auto",
        "createdAt": 1773329156092,
        "parsed": {
            "clawdis": {
                "emoji": "🧩",
                "homepage": "https:\/\/gateway.binaryworks.app",
                "requires": {
                    "bins": [
                        "node"
                    ]
                },
                "skillKey": "skill-hub-gateway"
            }
        },
        "version": "2.4.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "chinasilva",
        "handle": "chinasilva",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/16743182?v=4",
        "kind": "user",
        "linkedUserId": "kn76tmgxd57gptn96470x6bhx9826mc3"
    },
    "ownerHandle": "chinasilva",
    "skill": {
        "_creationTime": 1773022088397,
        "_id": "kd7bzbd1p7xnf0mb374exesrr582j0ph",
        "badges": [],
        "createdAt": 1773022088397,
        "displayName": "Skill Hub Gateway",
        "latestVersionId": "k97em436da88vb9vt1tqtjqdzs82rans",
        "ownerUserId": "kn76tmgxd57gptn96470x6bhx9826mc3",
        "slug": "skill-hub-gateway",
        "stats": {
            "comments": 0,
            "downloads": 323,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 13
        },
        "summary": "Unified gateway skill for async execute\/poll, portal user closure, and telemetry feedback workflows.",
        "tags": {
            "latest": "k97em436da88vb9vt1tqtjqdzs82rans"
        },
        "updatedAt": 1774330742563
    }
}