41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's description says it will use a workspace API and produce concise LLM summaries, but the shipped code reads a hard-coded Windows path directly, performs no sanitization, and merely returns ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771713779632,
        "_id": "k973qe05qv4j5gpb7kj8nt64bs81jcy2",
        "changelog": "- Initial release of Summarize File skill.\n- Reads text files and generates concise 2–3 sentence summaries, highlighting key insights and ignoring boilerplate or empty lines.\n- Handles various formats including logs, reports, CSVs, and multi-line content.\n- Operates securely with read-only, local file access; no data leaves your machine.\n- Supports file path validation to prevent directory escapes.",
        "changelogSource": "auto",
        "createdAt": 1771713779632,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Muhammad Muazzain",
        "handle": "muhammadmuazzain",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/90068510?v=4",
        "kind": "user",
        "linkedUserId": "kn70fsg43ne8f8bpngpasvje5d81jhrm"
    },
    "ownerHandle": "muhammadmuazzain",
    "skill": {
        "_creationTime": 1771713779632,
        "_id": "kd7bhcjh8vjzwn11gjycww62h181jwxp",
        "badges": [],
        "createdAt": 1771713779632,
        "displayName": "Summarize File",
        "latestVersionId": "k973qe05qv4j5gpb7kj8nt64bs81jcy2",
        "ownerUserId": "kn70fsg43ne8f8bpngpasvje5d81jhrm",
        "slug": "summarize-file",
        "stats": {
            "comments": 0,
            "downloads": 1105,
            "installsAllTime": 15,
            "installsCurrent": 13,
            "stars": 0,
            "versions": 1
        },
        "summary": "Reads text files from workspace\/paths and generates concise summaries. Handles logs, reports, CSVs, multi-line content.",
        "tags": {
            "latest": "k973qe05qv4j5gpb7kj8nt64bs81jcy2"
        },
        "updatedAt": 1774326194821
    }
}