72/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： benign

The skill behavior matches its description: it generates QR-card SVG/PNG files locally using a Node script; nothing in the files attempts to access unrelated secrets, networks, or system credentials.

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773048950307,
        "_id": "k97emr807cjyhyv3dvh2gjz1ex82jv84",
        "changelog": "Improve description for scan-to-install QR sharing",
        "changelogSource": "user",
        "createdAt": 1773048950307,
        "version": "0.1.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Jack Lee",
        "handle": "jackleeio",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/20477587?v=4",
        "kind": "user",
        "linkedUserId": "kn79wkx497eswg1qzvj24r5dhx823j7n"
    },
    "ownerHandle": "jackleeio",
    "skill": {
        "_creationTime": 1773046724787,
        "_id": "kd7asggczv4xsy4c2d6q00spvx82ktyw",
        "badges": [],
        "createdAt": 1773046724787,
        "displayName": "Skill QR Card",
        "latestVersionId": "k97emr807cjyhyv3dvh2gjz1ex82jv84",
        "ownerUserId": "kn79wkx497eswg1qzvj24r5dhx823j7n",
        "slug": "skill-qr-card",
        "stats": {
            "comments": 0,
            "downloads": 182,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "Generate styled QR images\/cards for ClawHub skills so users can scan and install instantly. Supports install-command payloads, ClawHub links, and GitHub link...",
        "tags": {
            "latest": "k97emr807cjyhyv3dvh2gjz1ex82jv84"
        },
        "updatedAt": 1774330841950
    }
}