41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated goal (find trending repos and optionally clone/run them) matches its instructions, but the deep-dive steps allow cloning and executing arbitrary third‑party code with insufficient g...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772067199064,
        "_id": "k970yfg3w1p004sjjbg04f8hdn81wsq4",
        "changelog": "Initial release of sync-trending.\n\n- Monitors technology trends (e.g., GitHub Trending) and contextualizes them for the user's project.\n- Provides \"Contextualized Trend Reports\" linking trending tools to project-specific value.\n- Offers to verify trends by cloning and testing repositories, with explicit user permission.\n- Summarizes verification outcomes and, if desired, generates actionable reports or integration plans.\n- Includes strong safety guidelines for handling third-party code.",
        "changelogSource": "user",
        "createdAt": 1772067199064,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "K",
        "handle": "likw99",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32830172?v=4",
        "kind": "user",
        "linkedUserId": "kn7dm8zsrmk55dkg2rjb3rc0s981xj1h"
    },
    "ownerHandle": "likw99",
    "skill": {
        "_creationTime": 1772067199064,
        "_id": "kd7d1chgw0w45kk8h3smkm6nz581xytm",
        "badges": [],
        "createdAt": 1772067199064,
        "displayName": "sync-trending",
        "latestVersionId": "k970yfg3w1p004sjjbg04f8hdn81wsq4",
        "ownerUserId": "kn7dm8zsrmk55dkg2rjb3rc0s981xj1h",
        "slug": "sync-trending",
        "stats": {
            "comments": 0,
            "downloads": 397,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 1
        },
        "summary": "Monitior technology trends (GitHub, etc.), contextualize them against the user's project, and autonomously verify them through installation and testing. Use...",
        "tags": {
            "latest": "k970yfg3w1p004sjjbg04f8hdn81wsq4"
        },
        "updatedAt": 1774327165613
    }
}