37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's functionality (scrape a website and generate ad copy) is coherent, but the package includes install/build steps and writes cached files despite metadata claiming instruction-only — and it ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774476937127,
        "_id": "k976wwcszfma0s17nqap8kqhmx83kgtg",
        "changelog": "- Added .env.example for easier environment setup.\n- Included package-lock.json to ensure consistent dependency installs.\n- Added skill.json to define skill metadata.\n- Updated documentation: clarified environment variable setup and reminded users not to commit real API keys or Civic tokens.",
        "changelogSource": "user",
        "createdAt": 1774476937127,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s176264ava9c9f57p4qn2h3afd83k3yc",
        "displayName": "chapagainashutosh8",
        "handle": "chapagainashutosh8",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/265134321?v=4",
        "kind": "user",
        "linkedUserId": "kn7c636v7dbykfv4hr6vf13pfh83k17m"
    },
    "ownerHandle": "chapagainashutosh8",
    "skill": {
        "_creationTime": 1774476553369,
        "_id": "kd73bjs8tebg96nt13t51yxm4183jxxt",
        "badges": [],
        "createdAt": 1774476553369,
        "displayName": "website to ads",
        "latestVersionId": "k976wwcszfma0s17nqap8kqhmx83kgtg",
        "ownerPublisherId": "s176264ava9c9f57p4qn2h3afd83k3yc",
        "ownerUserId": "kn7c636v7dbykfv4hr6vf13pfh83k17m",
        "slug": "skill2ads",
        "stats": {
            "comments": 0,
            "downloads": 11,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Scrape any business website and generate 5 Meta-ready ad variants matching the brand's voice. Use when the user wants to create ads, generate ad copy, or tur...",
        "tags": {
            "latest": "k976wwcszfma0s17nqap8kqhmx83kgtg"
        },
        "updatedAt": 1774481512100
    }
}