37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code largely matches its installer purpose, but several implementation details (hard-coded user paths, destructive filesystem operations, shell execution with unsanitized input, and lack o...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773307059721,
        "_id": "k974ta6cc3tjvdga672vgtys1n82ssnw",
        "changelog": "- Renamed to \"clawhub-skill-installer\" (from \"sunnyhot-skill-installer\")\n- Introduced a comprehensive SKILL.md with a detailed overview, features, usage, and troubleshooting guide\n- Added batch skill installation, automatic retry on API rate limits, and version management functionality\n- Included advanced options (verbose mode, specific version, force reinstall)\n- Provided system requirements, configuration instructions, and contribution guidelines",
        "changelogSource": "auto",
        "createdAt": 1773307059721,
        "parsed": {
            "clawdis": {
                "author": "sunnyhot"
            }
        },
        "version": "1.2.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "LuckPoppy",
        "handle": "sunnyhot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8822672?v=4",
        "kind": "user",
        "linkedUserId": "kn79e7737znkq4877n6wc93wn58292v9"
    },
    "ownerHandle": "sunnyhot",
    "skill": {
        "_creationTime": 1773307059721,
        "_id": "kd78aa6z5tx4kyjbckgfvpxjk582skjt",
        "badges": [],
        "canonicalSkillId": "kd79jah35hqt1wzqh7ae3xfvp182pkbb",
        "createdAt": 1773307059721,
        "displayName": "Skill Installer",
        "forkOf": {
            "at": 1773307059721,
            "kind": "duplicate",
            "skillId": "kd79jah35hqt1wzqh7ae3xfvp182pkbb"
        },
        "latestVersionId": "k974ta6cc3tjvdga672vgtys1n82ssnw",
        "ownerUserId": "kn79e7737znkq4877n6wc93wn58292v9",
        "slug": "sunnyhot-skill-installer",
        "stats": {
            "comments": 0,
            "downloads": 145,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "A comprehensive ClawHub skill installer that bypasses API rate limits. Search, install single skills, or batch install multiple skills with automatic retry l...",
        "tags": {
            "latest": "k974ta6cc3tjvdga672vgtys1n82ssnw"
        },
        "updatedAt": 1774332431293
    }
}