37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code matches its stated Xiaohongshu automation purpose, but it ships with an embedded data/cookies.json containing what appear to be real session tokens and other credentials — a dispropor...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773589521974,
        "_id": "k978j26f9bw1q2cc6agzqxnef182y8y3",
        "changelog": "v1.1.0: 重构为独立技能包，包含完整服务端代码，新增服务管理脚本",
        "changelogSource": "user",
        "createdAt": 1773589521974,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "wezn",
        "handle": "weznai",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/12661926?v=4",
        "kind": "user",
        "linkedUserId": "kn71br3sr2d6aeq5ke1cjee71h82x9sd"
    },
    "ownerHandle": "weznai",
    "skill": {
        "_creationTime": 1773587471237,
        "_id": "kd76mgv5cnxyq1qwvm2s87jwn982yrck",
        "badges": [],
        "createdAt": 1773587471237,
        "displayName": "小红书 MCP 服务",
        "latestVersionId": "k978j26f9bw1q2cc6agzqxnef182y8y3",
        "ownerUserId": "kn71br3sr2d6aeq5ke1cjee71h82x9sd",
        "slug": "skill-xhs-mcp-service",
        "stats": {
            "comments": 0,
            "downloads": 113,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "小红书（XHS\/RED）自动化助手。完整的小红书操作能力，包含 MCP 服务端。 当用户提到小红书、红书、XHS、RED、发笔记、搜笔记、小红书运营等任何与小红书相关的操作时使用此技能。",
        "tags": {
            "latest": "k978j26f9bw1q2cc6agzqxnef182y8y3"
        },
        "updatedAt": 1774334399346
    }
}