37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly does what it claims (run commands in a tmux session) but metadata omits the tmux requirement and the implementation uses execSync with insufficient escaping, which can cause the host ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773633768884,
        "_id": "k97bs96vfad0vx3981anb238sx831jk0",
        "changelog": "Initial release of taizi-claw-shell.\n\n- Runs shell commands safely inside a dedicated tmux session named \"claw\".\n- Provides a single tool, `claw_shell_run`, for sending commands and reading back output.\n- Strictly avoids interfering with other tmux sessions.\n- Asks for user confirmation before executing potentially destructive commands (e.g., `sudo`, `rm`, `reboot`).\n- Ensures clear separation of safe and dangerous command handling.",
        "changelogSource": "auto",
        "createdAt": 1773633768884,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "fresh3",
        "handle": "fresh3",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/23310067?v=4",
        "kind": "user",
        "linkedUserId": "kn73vhzz24t2bp0j5tr6scqfn5830nk2"
    },
    "ownerHandle": "fresh3",
    "skill": {
        "_creationTime": 1773633768884,
        "_id": "kd77c3nc7hdptqdkrtygh6rmex830qnh",
        "badges": [],
        "canonicalSkillId": "kd71t8nr121ncb14df1cxkdm0980bs12",
        "createdAt": 1773633768884,
        "displayName": "Taizi Claw Shell",
        "forkOf": {
            "at": 1773633768884,
            "kind": "fork",
            "skillId": "kd71t8nr121ncb14df1cxkdm0980bs12",
            "version": "1.0.0"
        },
        "latestVersionId": "k97bs96vfad0vx3981anb238sx831jk0",
        "ownerUserId": "kn73vhzz24t2bp0j5tr6scqfn5830nk2",
        "slug": "taizi-claw-shell",
        "stats": {
            "comments": 0,
            "downloads": 93,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Runs shell commands inside a dedicated tmux session named 'claw', returning command output and prompting before destructive commands.",
        "tags": {
            "latest": "k97bs96vfad0vx3981anb238sx831jk0"
        },
        "updatedAt": 1774334798469
    }
}