59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's README claims a Python CLI 'tfin' but the package contains no executable or code — the instructions ask you to chmod/symlink a binary that isn't included and to write into /usr/local/bin, ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770977491364,
        "_id": "k9799mp44mr7qwr9hfs8jjskks812rbv",
        "changelog": "Initial release of Tencent Finance CLI\n\n- Fetch stock prices, detailed quotes, and compare stocks from Tencent Finance API.\n- No API key required; optimized for mainland China network environments.\n- Supports US stocks, China A-shares, Hong Kong stocks, and popular cryptocurrencies.\n- Fast and stable access, not subject to rate limiting.\n- Simple CLI commands for price checks, quotes, comparison, and search.\n- Requires Python 3.7+, requests, and rich.",
        "changelogSource": "auto",
        "createdAt": 1770977491364,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "squally2k",
        "handle": "squally2k",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/18303398?v=4",
        "kind": "user",
        "linkedUserId": "kn7a3dwz0zh7bbs8tgypyqbmvd81395k"
    },
    "ownerHandle": "squally2k",
    "skill": {
        "_creationTime": 1770977491364,
        "_id": "kd7bxtsxz26zecrj84r2256afh813qaf",
        "badges": [],
        "canonicalSkillId": "kd7fzrgqyqx2bc2qnfde95xqzx8104jn",
        "createdAt": 1770977491364,
        "displayName": "Tecent Finance 1.0.0",
        "forkOf": {
            "at": 1770977491364,
            "kind": "duplicate",
            "skillId": "kd7fzrgqyqx2bc2qnfde95xqzx8104jn"
        },
        "latestVersionId": "k9799mp44mr7qwr9hfs8jjskks812rbv",
        "ownerUserId": "kn7a3dwz0zh7bbs8tgypyqbmvd81395k",
        "slug": "tecent-finance-1-0-0",
        "stats": {
            "comments": 0,
            "downloads": 573,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 0,
            "versions": 1
        },
        "summary": "Get stock prices, quotes, and compare stocks using Tencent Finance API. No API key required. Supports US stocks, China A-Shares, Hong Kong stocks. Optimized for use in mainland China.",
        "tags": {
            "latest": "k9799mp44mr7qwr9hfs8jjskks812rbv"
        },
        "updatedAt": 1772337613689
    }
}