37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and instructions match its stated purpose (syncing/publishing skills) but there are several practical and security mismatches — hardcoded user paths, implicit/undeclared credentials, ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773393800577,
        "_id": "k97etpd059cqthpgz812z28whx82vg0h",
        "changelog": "## skill-sync v1.5.0\n\n- Update: Modified `config\/settings.json`.  \n- No changes to features, documentation, or code logic in this release.\n- All core functionality and documentation remain the same as the previous version.",
        "changelogSource": "auto",
        "createdAt": 1773393800577,
        "parsed": {
            "clawdis": {
                "author": "sunnyhot"
            }
        },
        "version": "1.5.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "LuckPoppy",
        "handle": "sunnyhot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8822672?v=4",
        "kind": "user",
        "linkedUserId": "kn79e7737znkq4877n6wc93wn58292v9"
    },
    "ownerHandle": "sunnyhot",
    "skill": {
        "_creationTime": 1773298076341,
        "_id": "kd707qwb95pdrhnhq0fpftccwh82swan",
        "badges": [],
        "createdAt": 1773298076341,
        "displayName": "Skill Sync",
        "latestVersionId": "k97etpd059cqthpgz812z28whx82vg0h",
        "ownerUserId": "kn79e7737znkq4877n6wc93wn58292v9",
        "slug": "skill-sync",
        "stats": {
            "comments": 0,
            "downloads": 200,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 6
        },
        "summary": "Automatically sync local skills to ClawHub and GitHub. Detects new\/modified skills, publishes to ClawHub, commits to GitHub, and maintains sync status.",
        "tags": {
            "latest": "k97etpd059cqthpgz812z28whx82vg0h"
        },
        "updatedAt": 1774332353913
    }
}