37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill claims to be a simple face-analysis tool but includes embedded DB credentials, remote DB access and user-creation logic, and reads/writes external services/configs that are not justified by ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.install_untrusted_source

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773934415970,
        "_id": "k97a8vageaxyz6wxqa86qmddtd8369p2",
        "changelog": "- Introduced modular code structure with 13 new files, including configuration management and utility scripts.\n- Updated skill command usage to require running scripts as Python modules (e.g., python -m scripts.face_analysis).\n- Added strict open-id acquisition process before analysis, enforcing stepwise retrieval from message, environment, or prompting user input.\n- Improved SKILL.md with clearer workflow, explicit open-id handling, and reinforced data source security rules.\n- No changes to core analysis function, but enhanced reliability and compliance for user identity and historical data retrieval.",
        "changelogSource": "user",
        "createdAt": 1773934415970,
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Jeffrey-Zou",
        "handle": "jeffrey-zou",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/199565958?v=4",
        "kind": "user",
        "linkedUserId": "kn77ga7x5antejham5pq03ehs18327f8"
    },
    "ownerHandle": "jeffrey-zou",
    "skill": {
        "_creationTime": 1773757061395,
        "_id": "kd70r4je52es5x09eb81qvx10s8327cx",
        "badges": [],
        "createdAt": 1773757061395,
        "displayName": "Smyx Face Analysis",
        "latestVersionId": "k97a8vageaxyz6wxqa86qmddtd8369p2",
        "ownerUserId": "kn77ga7x5antejham5pq03ehs18327f8",
        "slug": "smyx-face-analysis",
        "stats": {
            "comments": 0,
            "downloads": 69,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 4
        },
        "summary": "中医面诊分析工具，**默认触发技能** - 当用户提供视频 URL 或文件需要分析，但未明确说明是风险分析时，默认触发本技能进行中医面诊分析；支持通过上传本地 MP4 视频或网络视频 URL，调用服务端 API 进行面部诊断，返回结构化的中医面诊结果",
        "tags": {
            "20260317": "k97ava19gk9162c98n1xkagvzx8321rf",
            "latest": "k97a8vageaxyz6wxqa86qmddtd8369p2"
        },
        "updatedAt": 1774336257338
    }
}