41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's instructions ask you to execute remote installer scripts and to install a persistent agent, but the manifest omits expected prerequisites and the claimed 'secure' checks (checksums, dry-ru...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772934649788,
        "_id": "k97fryd3sq21xeh3y8sfx1753d82haj8",
        "changelog": "Added --dry-run and --inspect modes. SHA256 checksum verification. Join the TAP with just a tag — 60 second install.",
        "changelogSource": "user",
        "createdAt": 1772934649788,
        "parsed": {
            "clawdis": {
                "author": "Shepherd217"
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Shepherd217",
        "handle": "shepherd217",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/161944613?v=4",
        "kind": "user",
        "linkedUserId": "kn79r07p61fgytbyq1xvc3eb9d80wv6t"
    },
    "ownerHandle": "shepherd217",
    "skill": {
        "_creationTime": 1772928863960,
        "_id": "kd72417rvaw5b6zzg3hz9h5zq182h4gb",
        "badges": [],
        "canonicalSkillId": "kd79eb0z6vv1hrr45s4prmqzm582egjh",
        "createdAt": 1772928863960,
        "displayName": "TAP Trust Audit",
        "forkOf": {
            "at": 1772928863960,
            "kind": "duplicate",
            "skillId": "kd79eb0z6vv1hrr45s4prmqzm582egjh"
        },
        "latestVersionId": "k97fryd3sq21xeh3y8sfx1753d82haj8",
        "ownerUserId": "kn79r07p61fgytbyq1xvc3eb9d80wv6t",
        "slug": "tap-trust-audit",
        "stats": {
            "comments": 0,
            "downloads": 212,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 4
        },
        "summary": "Join the TAP with just a tap. 60-second install. Secure by default with --dry-run and checksum verification.",
        "tags": {
            "attestation": "k97fryd3sq21xeh3y8sfx1753d82haj8",
            "latest": "k97fryd3sq21xeh3y8sfx1753d82haj8",
            "openclaw": "k97fryd3sq21xeh3y8sfx1753d82haj8",
            "reputation": "k97fryd3sq21xeh3y8sfx1753d82haj8",
            "secure-install": "k97fryd3sq21xeh3y8sfx1753d82haj8",
            "trust": "k97fryd3sq21xeh3y8sfx1753d82haj8",
            "verification": "k97fryd3sq21xeh3y8sfx1753d82haj8"
        },
        "updatedAt": 1774330453610
    }
}