37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill is nominally a common HTTP/DB utility (which matches its code), but it contains hard-coded production credentials/endpoints, reads undeclared environment variables, and pulls a large set of ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.install_untrusted_source

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774836695955,
        "_id": "k970503ehcz1p2xzxjg0ew5e8183w1av",
        "changelog": "- Updated configuration files: config-dev.yaml, config-test.yaml, and config.yaml.\n- Adjusted implementation in core scripts: api_service.py, base.py, config.py, dao.py, and util.py.\n- Documentation (SKILL.md) remains unchanged in core capabilities and usage.\n- No breaking changes to the public interface; changes focus on internal improvements and configuration handling.",
        "changelogSource": "auto",
        "createdAt": 1774836695955,
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1752wc1fc7gpzk9rvg32jbz2583g3fe",
        "displayName": "生命涌现",
        "handle": "raymond758",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/127816890?v=4",
        "kind": "user",
        "linkedUserId": "kn7cs4zepqcymy1sczy4tsqtdd838r4t"
    },
    "ownerHandle": "raymond758",
    "skill": {
        "_creationTime": 1774002708007,
        "_id": "kd70gvkmnaxv1mw0x0h8meb0h5838xc8",
        "badges": [],
        "createdAt": 1774002708007,
        "displayName": "生命涌现公共库",
        "latestVersionId": "k970503ehcz1p2xzxjg0ew5e8183w1av",
        "ownerPublisherId": "s1752wc1fc7gpzk9rvg32jbz2583g3fe",
        "ownerUserId": "kn7cs4zepqcymy1sczy4tsqtdd838r4t",
        "slug": "smyx-common",
        "stats": {
            "comments": 0,
            "downloads": 55,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "生命涌现项目公共基础工具库，提供数据库HTTP请求、通用工具类，是其他业务技能的基础依赖",
        "tags": {
            "latest": "k970503ehcz1p2xzxjg0ew5e8183w1av"
        },
        "updatedAt": 1774837608727
    }
}