65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to do what it says (fetch Slack members) but the package metadata omits the required SLACK_BOT_TOKEN credential and the source/owner information is minimal — that mismatch and lack o...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774630867657,
        "_id": "k97ea87amphh13mwcwwasw68ss83qdcr",
        "changelog": "Initial release of slack-member-fetch\n\n- Fetches member information from an entire Slack workspace or a specific channel (by ID or name)\n- Outputs structured JSON including user details such as ID, username, real name, email, and roles\n- Supports downstream automation with machine-readable output\n- Requires a Slack bot token and recommended scopes: users:read, users:read.email, conversations:read\n- Handles large workspaces via automatic pagination",
        "changelogSource": "user",
        "createdAt": 1774630867657,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1740ryknxnr4e74t6af6kj0vx83k4m8",
        "displayName": "Donigwapo",
        "handle": "donigwapo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/145357656?v=4",
        "kind": "user",
        "linkedUserId": "kn777nmddg1ngy334gcc4aca4d83kg66"
    },
    "ownerHandle": "donigwapo",
    "skill": {
        "_creationTime": 1774630867657,
        "_id": "kd7bfyxgm5rcdh2anvgayxrkv583ppxs",
        "badges": [],
        "createdAt": 1774630867657,
        "displayName": "Slack Member Fetch",
        "latestVersionId": "k97ea87amphh13mwcwwasw68ss83qdcr",
        "ownerPublisherId": "s1740ryknxnr4e74t6af6kj0vx83k4m8",
        "ownerUserId": "kn777nmddg1ngy334gcc4aca4d83kg66",
        "slug": "slack-member-fetch",
        "stats": {
            "comments": 0,
            "downloads": 26,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Fetch Slack member information from a workspace or a specific Slack channel using the Slack Web API. Use when the user asks to list Slack members, get member...",
        "tags": {
            "channel": "k97ea87amphh13mwcwwasw68ss83qdcr",
            "export": "k97ea87amphh13mwcwwasw68ss83qdcr",
            "latest": "k97ea87amphh13mwcwwasw68ss83qdcr",
            "members": "k97ea87amphh13mwcwwasw68ss83qdcr",
            "slack": "k97ea87amphh13mwcwwasw68ss83qdcr",
            "workspace": "k97ea87amphh13mwcwwasw68ss83qdcr"
        },
        "updatedAt": 1774631815684
    }
}