56/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it says (a local skill scanner) but includes surprising external-integration artifacts (a hard-coded Moltbook API key, upload/monitor scripts) and uses environment variables...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773231126339,
        "_id": "k9730r8jekbk7emx2wx1zza25982qd79",
        "changelog": "Initial release of SkillShield 1.0.0 — a streamlined skill security scanner.\n\n- Added core scripts for scanning, verification, reporting, and Moltbook integration.\n- Introduced trust rating system (A+ ~ F) with security and permission analysis.\n- Detects credential theft, data exfiltration, unauthorized access, command execution, suspicious networking, and obfuscation.\n- JSON and detailed report output supported; triggers integration with agent ecosystems.\n- Moltbook guardian script allows automated monitoring of uploaded skills.\n- Removed legacy\/test files for a minimal, production-focused codebase.",
        "changelogSource": "user",
        "createdAt": 1773231126339,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ericzhan",
        "handle": "uexo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1155107?v=4",
        "kind": "user",
        "linkedUserId": "kn74hx92ap9qnkqd2dep1bg8xd81whhb"
    },
    "ownerHandle": "uexo",
    "skill": {
        "_creationTime": 1773231126339,
        "_id": "kd7cwm85ytpq0sa9zw9wkk3yed82qr9h",
        "badges": [],
        "createdAt": 1773231126339,
        "displayName": "skill shield",
        "latestVersionId": "k9730r8jekbk7emx2wx1zza25982qd79",
        "ownerUserId": "kn74hx92ap9qnkqd2dep1bg8xd81whhb",
        "slug": "skillshieldskill",
        "stats": {
            "comments": 0,
            "downloads": 212,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "AI Agent Skill Security Scanner - Detect malicious skills, verify signatures, analyze permissions, and provide trust ratings for the agent ecosystem. Protect...",
        "tags": {
            "latest": "k9730r8jekbk7emx2wx1zza25982qd79"
        },
        "updatedAt": 1773282126021
    }
}