47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (broker OAuth grants) matches its behavior, but the bundled script downloads and executes content from tapauth.ai (via eval and sourcing remote files) and caches secrets on ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774477173724,
        "_id": "k979eebe0s4qzawczm90dad1vx83kwk7",
        "changelog": "Add Apify provider, OpenClaw references, Gmail reference",
        "changelogSource": "user",
        "createdAt": 1774477173724,
        "version": "2.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s171pfd56y4q14h879xmfz6ny983egve",
        "displayName": "Jonah Schwartz",
        "handle": "schwartzdev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/4267882?v=4",
        "kind": "user",
        "linkedUserId": "kn7542bxp4vq2hkyyn1p2xa4jd81rcew"
    },
    "ownerHandle": "schwartzdev",
    "skill": {
        "_creationTime": 1771966805086,
        "_id": "kd7deygt6m1vfcya3x9tqm45wh81s0nb",
        "badges": [],
        "createdAt": 1771966805086,
        "displayName": "Skill",
        "latestVersionId": "k979eebe0s4qzawczm90dad1vx83kwk7",
        "ownerPublisherId": "s171pfd56y4q14h879xmfz6ny983egve",
        "ownerUserId": "kn7542bxp4vq2hkyyn1p2xa4jd81rcew",
        "slug": "tapauth",
        "stats": {
            "comments": 0,
            "downloads": 450,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 11
        },
        "summary": "Use when you need an OAuth token for a user's account — Google Calendar, Gmail, GitHub, Slack, Linear, Notion, Vercel, Sentry, Asana, Discord, or Apify. No A...",
        "tags": {
            "latest": "k979eebe0s4qzawczm90dad1vx83kwk7"
        },
        "updatedAt": 1774481507837
    }
}