56/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： clean

OpenClaw： suspicious

The skill is plausibly a Tencent COS integration, but the package metadata omits required credentials and the included setup script persistently writes your SecretId/SecretKey into shell/config files ...

[内容已截断]

VirusTotal： unknown VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774155722228,
        "_id": "k972fb1mtvpzrrj7jm0h8ptynh83dv5z",
        "changelog": "Updated description to English",
        "changelogSource": "user",
        "createdAt": 1774155722228,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "install": [
                    {
                        "bins": [
                            "mcporter"
                        ],
                        "id": "node-mcporter",
                        "kind": "node",
                        "label": "Install mcporter (MCP CLI)",
                        "package": "mcporter"
                    },
                    {
                        "bins": [
                            "cos-mcp"
                        ],
                        "id": "node-cos-mcp",
                        "kind": "node",
                        "label": "Install cos-mcp (COS MCP Server)",
                        "package": "cos-mcp"
                    },
                    {
                        "id": "node-cos-sdk",
                        "kind": "node",
                        "label": "Install COS Node.js SDK",
                        "package": "cos-nodejs-sdk-v5"
                    }
                ]
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jason-aka-chen",
        "handle": "jason-aka-chen",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/251550877?v=4",
        "kind": "user",
        "linkedUserId": "kn7akxs95zvpgfsgh4sp2me6cs83dmdw"
    },
    "ownerHandle": "jason-aka-chen",
    "skill": {
        "_creationTime": 1774155722228,
        "_id": "kd79ad6d0grm268a1sy8yfrped83czsn",
        "badges": [],
        "createdAt": 1774155722228,
        "displayName": "Tencent Cloud COS",
        "latestVersionId": "k972fb1mtvpzrrj7jm0h8ptynh83dv5z",
        "ownerUserId": "kn7akxs95zvpgfsgh4sp2me6cs83dmdw",
        "slug": "tencent-cos-chen",
        "stats": {
            "comments": 0,
            "downloads": 35,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Tencent Cloud Object Storage (COS) and Data万象 (CI) integration skill. Use this when you need to upload, download, and manage cloud storage files, or perform...",
        "tags": {
            "latest": "k972fb1mtvpzrrj7jm0h8ptynh83dv5z"
        },
        "updatedAt": 1774155749076
    }
}