94/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： unknown

OpenClaw： benign

The skill is internally consistent with its stated purpose (a local, pattern-based CLI auditor); it contains a readable bash analyzer and pattern DB and does not request unrelated credentials or persi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770824827488,
        "_id": "k97ckefyghfpb6bwhyx0epteas80ywwa",
        "changelog": "- Added a command-line Bash script (analyze-skill.sh) for local security audits of ClawHub skills.\n- Updated documentation to emphasize CLI usage and step-by-step instructions.\n- Clearly outlined the scope: manual invocation, no automatic scanning or VirusTotal API integration.\n- Improved description of detection heuristics and audit workflow.\n- Detailed how to analyze skills by slug or local file for risk assessment.",
        "changelogSource": "user",
        "createdAt": 1770824827488,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "curl",
                        "jq",
                        "grep",
                        "bash"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "AM",
        "handle": "akhmittra",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/42378320?v=4",
        "kind": "user",
        "linkedUserId": "kn70q4cgkxjmetqe38gwjsb55n80r4ej"
    },
    "ownerHandle": "akhmittra",
    "skill": {
        "_creationTime": 1770536244483,
        "_id": "kd72y73xbq3wprt081ny2nhrv180s4aq",
        "badges": [],
        "createdAt": 1770536244483,
        "displayName": "Skill Security Auditor",
        "latestVersionId": "k97ckefyghfpb6bwhyx0epteas80ywwa",
        "ownerUserId": "kn70q4cgkxjmetqe38gwjsb55n80r4ej",
        "slug": "skill-security-auditor",
        "stats": {
            "comments": 0,
            "downloads": 3214,
            "installsAllTime": 46,
            "installsCurrent": 44,
            "stars": 3,
            "versions": 2
        },
        "summary": "Command-line security analyzer for ClawHub skills. Run analyze-skill.sh to scan SKILL.md files for malicious patterns, credential leaks, and C2 infrastructure before installation. Includes threat intelligence database with 20+ detection patterns.",
        "tags": {
            "audit": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "cli-tool": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "defense": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "latest": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "malware-detection": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "pattern-matching": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "pre-installation": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "security": "k97ckefyghfpb6bwhyx0epteas80ywwa",
            "threat-intelligence": "k97ckefyghfpb6bwhyx0epteas80ywwa"
        },
        "updatedAt": 1774295860758
    }
}