59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's behavior (replaying signed Stripe webhooks) matches its description, but metadata and declared requirements are inconsistent and the runtime will accept a webhook secret and arbitrary targ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772734178572,
        "_id": "k973a9adfe5z7mvw316dkff7mh82bmb9",
        "changelog": "Initial release of Stripe Webhook Replay Lab:\n\n- Replay signed Stripe webhook payloads to a specified endpoint for idempotency and retry debugging.\n- Supports loading event data from a JSON file or inline input.\n- Generates valid Stripe-Signature headers with your webhook secret.\n- Allows customizing replay count, delay, timeout, and accepted HTTP status codes.\n- Prints per-attempt HTTP status, latency, and a pass\/fail summary for debugging.\n- Exits successfully only if all replay attempts meet the success criteria.",
        "changelogSource": "auto",
        "createdAt": 1772734178572,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "bash",
                        "curl",
                        "openssl",
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Daniel Lummis",
        "handle": "daniellummis",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/65238171?v=4",
        "kind": "user",
        "linkedUserId": "kn74qp31gs45fmt9eg7jbc4r6n828jdj"
    },
    "ownerHandle": "daniellummis",
    "skill": {
        "_creationTime": 1772734178572,
        "_id": "kd76kajp8h4mcbhyw0c27phg9h82axtf",
        "badges": [],
        "createdAt": 1772734178572,
        "displayName": "Stripe Webhook Replay Lab",
        "latestVersionId": "k973a9adfe5z7mvw316dkff7mh82bmb9",
        "ownerUserId": "kn74qp31gs45fmt9eg7jbc4r6n828jdj",
        "slug": "stripe-webhook-replay-lab",
        "stats": {
            "comments": 0,
            "downloads": 173,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Replay signed Stripe webhook payloads to a local or staging endpoint for idempotency and retry debugging.",
        "tags": {
            "latest": "k973a9adfe5z7mvw316dkff7mh82bmb9"
        },
        "updatedAt": 1772734203072
    }
}