41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill generally matches its stated purpose (Tencent COS operations) but its declared metadata omits the cloud credentials it requires and its installer persists plain-text credentials to user shel...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772789851064,
        "_id": "k97d23trpt71ac94qsyb4p45bn82ctq7",
        "changelog": "**Added support for custom domain parameters in COS credential configuration and environment variables.**\n\n- 新增支持自定义域名相关参数：Domain、ServiceDomain、Protocol，可用于替换默认 COS 访问域名和协议。\n- setup.sh 配置流程增加上述可选参数说明与使用方法。\n- Node.js SDK 环境变量支持 TENCENT_COS_DOMAIN、TENCENT_COS_SERVICE_DOMAIN、TENCENT_COS_PROTOCOL。\n- 更新 coscmd 方式相关自定义域名参数说明和限制。\n- 其他说明文档细节优化，无核心功能变动。",
        "changelogSource": "user",
        "createdAt": 1772789851064,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "install": [
                    {
                        "bins": [
                            "mcporter"
                        ],
                        "id": "node-mcporter",
                        "kind": "node",
                        "label": "Install mcporter (MCP CLI)",
                        "package": "mcporter"
                    },
                    {
                        "bins": [
                            "cos-mcp"
                        ],
                        "id": "node-cos-mcp",
                        "kind": "node",
                        "label": "Install cos-mcp (COS MCP Server)",
                        "package": "cos-mcp"
                    },
                    {
                        "id": "node-cos-sdk",
                        "kind": "node",
                        "label": "Install COS Node.js SDK",
                        "package": "cos-nodejs-sdk-v5"
                    }
                ]
            }
        },
        "version": "1.0.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ShawnmZhang",
        "handle": "shawnminh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/31064728?v=4",
        "kind": "user",
        "linkedUserId": "kn75r0rammt45k8qe5we0sh63580c5y0"
    },
    "ownerHandle": "shawnminh",
    "skill": {
        "_creationTime": 1770275618274,
        "_id": "kd770g89j3qxy06490jnh3pcrs80j0x2",
        "badges": [],
        "canonicalSkillId": "kd7edvey61szjthvd49qdvzd1h80c2zk",
        "createdAt": 1770275618274,
        "displayName": "腾讯云COS存储",
        "forkOf": {
            "at": 1770275618274,
            "kind": "duplicate",
            "skillId": "kd7edvey61szjthvd49qdvzd1h80c2zk"
        },
        "latestVersionId": "k97d23trpt71ac94qsyb4p45bn82ctq7",
        "ownerUserId": "kn75r0rammt45k8qe5we0sh63580c5y0",
        "slug": "tencent-cloud-cos",
        "stats": {
            "comments": 0,
            "downloads": 1447,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "腾讯云对象存储(COS)和数据万象(CI)集成技能。当用户需要上传、下载、管理云存储文件， 或需要进行图片处理（质量评估、超分辨率、抠图、二维码识别、水印）、智能图片搜索、 文档转PDF、视频智能封面生成等操作时使用此技能。",
        "tags": {
            "latest": "k97d23trpt71ac94qsyb4p45bn82ctq7"
        },
        "updatedAt": 1774322714741
    }
}