90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill's code, docs, and runtime instructions are consistent with a Python static security scanner; nothing indicates it is trying to do something other than scanning and optional VirusTotal checks...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dynamic_code_execution

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774650194685,
        "_id": "k975f9dwgt80nndjjgvj8jnwm983pt8h",
        "changelog": "skill-secure-checker v0.1.0\n\n- Initial release supporting static code analysis for Python skills.\n- Detects hardcoded secrets, dangerous functions, and risky code patterns.\n- Integrates VirusTotal API for optional file reputation checks.\n- Outputs machine-readable JSON and user-friendly HTML security reports.\n- Risk scoring with configurable severity thresholds.\n- Zero external Python dependencies; works standalone.",
        "changelogSource": "auto",
        "createdAt": 1774650194685,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17cnh4v6k2vf1742dfy2z5vj183qz0q",
        "displayName": "utopiabenben",
        "handle": "utopiabenben",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/19267750?v=4",
        "kind": "user",
        "linkedUserId": "kn7b8psv65qtavar5tbjmyztx582a0c5"
    },
    "ownerHandle": "utopiabenben",
    "skill": {
        "_creationTime": 1774650194685,
        "_id": "kd7ce84fj0aev2stc9jwce377s83qapx",
        "badges": [],
        "createdAt": 1774650194685,
        "displayName": "Skill Security Scanner",
        "latestVersionId": "k975f9dwgt80nndjjgvj8jnwm983pt8h",
        "ownerPublisherId": "s17cnh4v6k2vf1742dfy2z5vj183qz0q",
        "ownerUserId": "kn7b8psv65qtavar5tbjmyztx582a0c5",
        "slug": "skill-secure-checker",
        "stats": {
            "comments": 0,
            "downloads": 20,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Automatically scans Python skill code to detect security risks like malicious patterns, hardcoded secrets, dangerous functions, and integrates VirusTotal sca...",
        "tags": {
            "latest": "k975f9dwgt80nndjjgvj8jnwm983pt8h"
        },
        "updatedAt": 1774650706797
    }
}