65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated features (tamper-detecting SHA‑256 lockfile, permission tightening, MEMORY.md logging) do not match the supplied scripts — it will modify ~/.openclaw/openclaw.json but several claim...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774734178418,
        "_id": "k97dm5nz6e7p3cbv27fkwmk3zx83rn15",
        "changelog": "Initial release of Stiff-Sec: a hardening and audit tool for OpenClaw setups.\n\n- Aggressively audits for common weaknesses (plaintext keys, file permissions, dangerous endpoints).\n- Harden routines auto-backup configuration and restrict file and network settings.\n- Every change is logged with undo instructions; simple restore command included.\n- Safe default policies—limits elevated tool use, locks down proxies, and marks secured state with a lockfile.\n- Easy CLI usage: audit risks, apply hardening, or restore backups with single commands.",
        "changelogSource": "user",
        "createdAt": 1774734178418,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s176dsfr7kh2p8nf3ehw1hes5h83rhzv",
        "displayName": "sf-dev-systems",
        "handle": "sf-dev-systems",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/243867764?v=4",
        "kind": "user",
        "linkedUserId": "kn74xsbj9h8322dkysxfgrtwyn83sg8b"
    },
    "ownerHandle": "sf-dev-systems",
    "skill": {
        "_creationTime": 1774734178418,
        "_id": "kd7e4rd2vcyetxvmj286xnsr5d83r48b",
        "badges": [],
        "createdAt": 1774734178418,
        "displayName": "Stiff-Sec — OpenClaw Security Hardener",
        "latestVersionId": "k97dm5nz6e7p3cbv27fkwmk3zx83rn15",
        "ownerPublisherId": "s176dsfr7kh2p8nf3ehw1hes5h83rhzv",
        "ownerUserId": "kn74xsbj9h8322dkysxfgrtwyn83sg8b",
        "slug": "stiff-sec",
        "stats": {
            "comments": 0,
            "downloads": 21,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Audit and securely harden OpenClaw setups by enforcing strict permissions, disabling elevated access, fixing proxy warnings, and backing up configs automatic...",
        "tags": {
            "latest": "k97dm5nz6e7p3cbv27fkwmk3zx83rn15"
        },
        "updatedAt": 1774735608198
    }
}