59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's code matches its stated purpose (controlling a local TBOT runtime and generating webhooks) but it reads runtime .env/.keyfile data, accesses many environment variables not declared in meta...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770840745444,
        "_id": "k979kp597r012ebd1warh1f1ys80yqjh",
        "changelog": "Initial release of tbot-controller – an interface for controlling and querying TradingBoat\/TBOT runtime stacks.\n\n- Supports querying TBOT sqlite DB for alerts, orders, errors, and portfolio (DB-first).\n- Allows starting\/stopping TBOT runtime (docker compose or systemd) with explicit confirmation required for control actions.\n- Provides on-demand health checks and recent log retrieval.\n- Implements strong safety rules: defaults to read-only, requires --run-it or RUN_IT=1 for state-changing actions, refuses to print secrets.\n- Probes and discovers runtime location; refusal if location or DB cannot be determined.\n- Separates install\/config of TBOT runtime; this skill operates only if runtime exists, otherwise read-only DB queries are available.\n- Requires use of a bash entrypoint script and isolated Python environment (via uv).",
        "changelogSource": "user",
        "createdAt": 1770840745444,
        "parsed": {
            "clawdis": {
                "emoji": "🛥️",
                "install": [
                    {
                        "bins": [
                            "uv"
                        ],
                        "formula": "uv",
                        "id": "uv-brew",
                        "kind": "brew",
                        "label": "Install uv (brew)"
                    }
                ],
                "requires": {
                    "bins": [
                        "uv"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "PlusGenie",
        "handle": "plusgenie",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1986788?v=4",
        "kind": "user",
        "linkedUserId": "kn72knrdfv13ns47mgcng65z0980ta60"
    },
    "ownerHandle": "plusgenie",
    "skill": {
        "_creationTime": 1770840745444,
        "_id": "kd75xax850f6wxmcfs835137ns80yj0g",
        "badges": [],
        "createdAt": 1770840745444,
        "displayName": "TBOT Controller",
        "latestVersionId": "k979kp597r012ebd1warh1f1ys80yqjh",
        "ownerUserId": "kn72knrdfv13ns47mgcng65z0980ta60",
        "slug": "tbot-controller",
        "stats": {
            "comments": 0,
            "downloads": 798,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Operate TradingBoat\/TBOT (TBOT runtime stack) via a controlled automation interface (DB-first queries; lifecycle control on explicit request).",
        "tags": {
            "automation": "k979kp597r012ebd1warh1f1ys80yqjh",
            "docker": "k979kp597r012ebd1warh1f1ys80yqjh",
            "ib-insync": "k979kp597r012ebd1warh1f1ys80yqjh",
            "ibkr": "k979kp597r012ebd1warh1f1ys80yqjh",
            "latest": "k979kp597r012ebd1warh1f1ys80yqjh",
            "tbot": "k979kp597r012ebd1warh1f1ys80yqjh",
            "tradingboat": "k979kp597r012ebd1warh1f1ys80yqjh"
        },
        "updatedAt": 1772059235883
    }
}