65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (an MCP-backed reader-mode) matches the instructions, but the runtime instructions rely on npx to fetch and execute an npm package (sombra-mcp) and ask you to embed a bearer...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774097308111,
        "_id": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
        "changelog": "- Updated to version 1.0.1.\n- Minor documentation tweak: updated an example collection name\n- No code changes included in this release.",
        "changelogSource": "user",
        "createdAt": 1774097308111,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "npx"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Dan Peddle",
        "handle": "dazld",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/201036?v=4",
        "kind": "user",
        "linkedUserId": "kn7b36pwq3k2w6zrk55yrgmm9s83atqc"
    },
    "ownerHandle": "dazld",
    "skill": {
        "_creationTime": 1774097112288,
        "_id": "kd74jx2pcrhzy1ksgbheemnra583abjj",
        "badges": [],
        "createdAt": 1774097112288,
        "displayName": "Sombra — Reader Mode for AI",
        "latestVersionId": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
        "ownerUserId": "kn7b36pwq3k2w6zrk55yrgmm9s83atqc",
        "slug": "sombra-ai-reader-mode",
        "stats": {
            "comments": 0,
            "downloads": 27,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "Persistent reader mode for AI. Save web pages, organise into collections, distil to dense context, and serve it all through MCP.",
        "tags": {
            "context": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "context-engineering": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "documentation": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "knowledge-base": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "latest": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "mcp": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "reader-mode": "k97e0h0egqfgj6vf150a8wyxzh83bkxb",
            "research": "k97e0h0egqfgj6vf150a8wyxzh83bkxb"
        },
        "updatedAt": 1774097815785
    }
}