59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's overall purpose (accessing Spotify via the Web API) matches its code, but the runtime instructions and setup are internally inconsistent (credential handling mismatches) — this looks like ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769223241799,
        "_id": "k978fcqjpjzzvpsarc3d3xkg5h7zt07g",
        "changelog": "- Added README.md and a guided setup script (scripts\/setup.sh) for easier installation.\n- SKILL.md updated: introduces a quick setup wizard, headless authentication support, and expanded troubleshooting section.\n- Now supports credential storage via a JSON file or environment variables.\n- Enhanced documentation for usability and credential management.",
        "changelogSource": "auto",
        "createdAt": 1769223241799,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "braydoncoyer",
        "handle": "braydoncoyer",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/38799309?v=4",
        "kind": "user",
        "linkedUserId": "kn77v5qbjpg52rstevfz4ze17n7zr6av"
    },
    "ownerHandle": "braydoncoyer",
    "skill": {
        "_creationTime": 1769184147313,
        "_id": "kd71hcygsc8eb1w6efx93vc1297zr6mw",
        "badges": [],
        "createdAt": 1769184147313,
        "displayName": "Spotify History",
        "latestVersionId": "k978fcqjpjzzvpsarc3d3xkg5h7zt07g",
        "ownerUserId": "kn77v5qbjpg52rstevfz4ze17n7zr6av",
        "slug": "spotify-history",
        "stats": {
            "comments": 0,
            "downloads": 2395,
            "installsAllTime": 4,
            "installsCurrent": 4,
            "stars": 4,
            "versions": 2
        },
        "summary": "Access Spotify listening history, top artists\/tracks, and get personalized recommendations via the Spotify Web API. Use when fetching a user's recent plays, analyzing music taste, or generating recommendations. Requires one-time OAuth setup.",
        "tags": {
            "latest": "k978fcqjpjzzvpsarc3d3xkg5h7zt07g"
        },
        "updatedAt": 1772161488662
    }
}