41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill-installer script matches its stated purpose (installing OpenClaw skills) but contains unsafe file-handling (unsanitized zip extraction to a predictable /tmp path and use of copytree), which ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772067345672,
        "_id": "k979nnjzpap5kkjd3g9y5f0d0n81xnka",
        "changelog": "Version 1.0.0 (2025-02-26)\n\n  新增功能：\n   - ✨ 一键安装 OpenClaw skills\n   - 🔍 智能文件搜索和选择（支持多个文件时让用户选择）\n   - ✅ 自动检测 OpenClaw 安装位置\n   - ✅ 重复检查，避免覆盖已安装的 skill\n   - 🔄 自动重启 Gateway，使新 skill 生效\n   - 📋 列出所有已安装的 skills\n   - 📝 详细的进度反馈和状态消息\n\n  技术特性：\n   - 🛠️ 自动验证 skill 结构（SKILL.md, _meta.json）\n   - 🔧 支持多种 Node.js 安装路径（nvm, npm 全局等）\n   - 💻 跨平台兼容（Linux, macOS, Windows）\n   - ⚠️ 详细的错误处理和提示\n   - 📦 ZIP 文件解压和安装\n\n  改进：\n   - 📖 完整的使用文档和示例\n   - 🐛 修复了路径解析问题\n   - 🎯 改进了 ZIP 提取处理\n   - 🔐 更好的错误恢复机制\n\n  已知问题：\n   - 某些系统可能需要手动重启 Gateway\n   - 每次运行只能安装一个 skill",
        "changelogSource": "user",
        "createdAt": 1772067345672,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "otho2966-ai",
        "handle": "otho2966-ai",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/260169808?v=4",
        "kind": "user",
        "linkedUserId": "kn7fznzjsgyghzgzpbpcbqcwpn81nq6c"
    },
    "ownerHandle": "otho2966-ai",
    "skill": {
        "_creationTime": 1772067345672,
        "_id": "kd795ya99v4fb06je4a9jkk1j581xshd",
        "badges": [],
        "createdAt": 1772067345672,
        "displayName": "skill_install",
        "latestVersionId": "k979nnjzpap5kkjd3g9y5f0d0n81xnka",
        "ownerUserId": "kn7fznzjsgyghzgzpbpcbqcwpn81nq6c",
        "slug": "skillinstall",
        "stats": {
            "comments": 0,
            "downloads": 293,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Install OpenClaw skills from clawhub.ai ZIP files with automatic detection, validation, and Gateway updates. Supports file search, duplicate checking, and in...",
        "tags": {
            "latest": "k979nnjzpap5kkjd3g9y5f0d0n81xnka"
        },
        "updatedAt": 1774327166699
    }
}