47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's code mostly matches its stated purpose (an automated Reddit/X reply bot) but the package metadata omits required secrets, the installer schedules a persistent daily job and injects your AP...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773955047326,
        "_id": "k972arxas54wq12agtf5z1gbh9837sky",
        "changelog": "**Reddit account warmup and lead tracking features added**\n\n- Added Reddit warmup: build account karma by posting comments in low-moderation subs (natural delays, no product mentions)\n- Introduced lead tracking: analyze replied posts for customer potential, scoring and extracting business details\n- Dashboard and CLI updated to support new commands: `warmup`, `leads`\n- Refined product description and trigger keyword config in documentation\n- Removed dashboard code and legacy setup script for a more streamlined core\n- Updated setup instructions for easier installation",
        "changelogSource": "auto",
        "createdAt": 1773955047326,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/github.com\/mguozhen\/social-bot"
            }
        },
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "mguozhen",
        "handle": "mguozhen",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1411875?v=4",
        "kind": "user",
        "linkedUserId": "kn778raj9vbke27beyvbmf09qd82ffzk"
    },
    "ownerHandle": "mguozhen",
    "skill": {
        "_creationTime": 1773820297834,
        "_id": "kd77pnsq1ajkhs2tx6s470ztm58355bv",
        "badges": [],
        "createdAt": 1773820297834,
        "displayName": "Social Reply Bot",
        "latestVersionId": "k972arxas54wq12agtf5z1gbh9837sky",
        "ownerUserId": "kn778raj9vbke27beyvbmf09qd82ffzk",
        "slug": "social-reply-bot",
        "stats": {
            "comments": 0,
            "downloads": 61,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Reddit & X\/Twitter auto-reply bot for ecommerce\/SaaS growth. Finds relevant posts about AI customer service, Amazon FBA, Shopify — posts genuine AI-generated...",
        "tags": {
            "automation": "k972arxas54wq12agtf5z1gbh9837sky",
            "ecommerce": "k972arxas54wq12agtf5z1gbh9837sky",
            "karma": "k972arxas54wq12agtf5z1gbh9837sky",
            "latest": "k972arxas54wq12agtf5z1gbh9837sky",
            "reddit": "k972arxas54wq12agtf5z1gbh9837sky",
            "social-media": "k972arxas54wq12agtf5z1gbh9837sky",
            "twitter": "k972arxas54wq12agtf5z1gbh9837sky"
        },
        "updatedAt": 1774336991137
    }
}