OpenClaw: suspicious
VirusTotal: suspicious
StaticScan: suspicious
OpenClaw: suspicious
The skill is nominally a common HTTP/DB utility (which matches its code), but it contains hard-coded production credentials/endpoints, reads undeclared environment variables, and pulls a large set of ... [内容已截断]
VirusTotal: suspicious VT 报告
静态扫描: suspicious
Detected: suspicious.install_untrusted_source
README 未提供
无文件信息
{
"latestVersion": {
"_creationTime": 1774105562584,
"_id": "k9707vc6hmz57s097kxf1wwb5983bf6r",
"changelog": "- Internal scripts updated: config.py, config.yaml, dao.py, and util.py modified.\n- No changes to public APIs, documentation, or described core functions.\n- Dependencies and module structure remain unchanged.\n- Suitable for projects needing shared tools, HTTP request handling, and unified configuration.",
"changelogSource": "auto",
"createdAt": 1774105562584,
"version": "1.0.1"
},
"owner": {
"_creationTime": 0,
"_id": "publishers:missing",
"displayName": "生命涌现",
"handle": "raymond758",
"image": "https:\/\/avatars.githubusercontent.com\/u\/127816890?v=4",
"kind": "user",
"linkedUserId": "kn7cs4zepqcymy1sczy4tsqtdd838r4t"
},
"ownerHandle": "raymond758",
"skill": {
"_creationTime": 1774002708007,
"_id": "kd70gvkmnaxv1mw0x0h8meb0h5838xc8",
"badges": [],
"createdAt": 1774002708007,
"displayName": "生命涌现公共技能",
"latestVersionId": "k9707vc6hmz57s097kxf1wwb5983bf6r",
"ownerUserId": "kn7cs4zepqcymy1sczy4tsqtdd838r4t",
"slug": "smyx-common",
"stats": {
"comments": 0,
"downloads": 37,
"installsAllTime": 1,
"installsCurrent": 1,
"stars": 0,
"versions": 2
},
"summary": "生命涌现项目公共基础工具库,提供数据库HTTP请求、通用工具类,是其他业务技能的基础依赖",
"tags": {
"latest": "k9707vc6hmz57s097kxf1wwb5983bf6r"
},
"updatedAt": 1774105909671
}
}