41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally does what it claims (create isolated worker agents and run multi-step workflows), but it requires high privileges (reads gateway auth token, modifies gateway config, creates a pers...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770918278525,
        "_id": "k97dzg4f8r4vjrj4s26p88c5cd811she",
        "changelog": "soulflow 1.1.2\n\n- Updated permissions metadata to explicitly list required file access, including read\/write to `~\/.openclaw\/openclaw.json` and workspace directories.\n- Clarified that the `soulflow-worker` agent inherits `authProfiles` from existing agents, granting access to external services (e.g., GitHub, cloud providers).\n- Strengthened security notes: worker agent inherits credentials; operations require local permissions; installation is recommended only if you trust the skill author.\n- No changes to functionality or workflow handling; documentation updates to reflect security and permission details.",
        "changelogSource": "user",
        "createdAt": 1770918278525,
        "parsed": {
            "clawdis": {
                "emoji": "⚙️",
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "1.1.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "0xtommythomas-dev",
        "handle": "0xtommythomas-dev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/40008904?v=4",
        "kind": "user",
        "linkedUserId": "kn7ep8rwventjzy7sszqf4rjt581096n"
    },
    "ownerHandle": "0xtommythomas-dev",
    "skill": {
        "_creationTime": 1770917173233,
        "_id": "kd75pj306kwmcakzk758z7tfmn811va7",
        "badges": [],
        "createdAt": 1770917173233,
        "displayName": "SoulFlow — Agent Teams Workflow Skill",
        "latestVersionId": "k97dzg4f8r4vjrj4s26p88c5cd811she",
        "ownerUserId": "kn7ep8rwventjzy7sszqf4rjt581096n",
        "slug": "soulflow",
        "stats": {
            "comments": 0,
            "downloads": 729,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 0,
            "versions": 3
        },
        "summary": "General-purpose AI workflow framework for OpenClaw. Build custom multi-step workflows for any task — dev, ops, research, content, or automation. Ships with dev workflow examples.",
        "tags": {
            "agent teams": "k97dzg4f8r4vjrj4s26p88c5cd811she",
            "ai": "k97dzg4f8r4vjrj4s26p88c5cd811she",
            "automation": "k97dzg4f8r4vjrj4s26p88c5cd811she",
            "framework": "k97dzg4f8r4vjrj4s26p88c5cd811she",
            "latest": "k97dzg4f8r4vjrj4s26p88c5cd811she",
            "workflow": "k97dzg4f8r4vjrj4s26p88c5cd811she"
        },
        "updatedAt": 1774324356017
    }
}