65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's code and instructions match its stated purpose (upload to Tencent COS and generate presigned URLs), but the package metadata omits the sensitive COS credentials it actually requires, an in...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774424073805,
        "_id": "k97cwx6mf9vktqddm8kh4895bh83jf0n",
        "changelog": "Initial release: upload file to COS and generate presigned view\/download URLs; support COS_* env vars.",
        "changelogSource": "user",
        "createdAt": 1774424073805,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17ehwsnq0azpj39tmf0dr772x83hzhp",
        "displayName": "hoyt",
        "handle": "hoyt-tian",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/6287094?v=4",
        "kind": "user",
        "linkedUserId": "kn77t6xzpb4xrygqzvdgnf0wv583ghhm"
    },
    "ownerHandle": "hoyt-tian",
    "skill": {
        "_creationTime": 1774424073805,
        "_id": "kd78pdxpj0yken5qt098bd3vbh83ktxa",
        "badges": [],
        "createdAt": 1774424073805,
        "displayName": "Tencent COS Uploader",
        "latestVersionId": "k97cwx6mf9vktqddm8kh4895bh83jf0n",
        "ownerPublisherId": "s17ehwsnq0azpj39tmf0dr772x83hzhp",
        "ownerUserId": "kn77t6xzpb4xrygqzvdgnf0wv583ghhm",
        "slug": "tencent-cos-uploader",
        "stats": {
            "comments": 0,
            "downloads": 16,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "使用腾讯云 COS Python SDK 上传指定本地文件到目标 Bucket，并生成可用于查看和下载的预签名访问链接。用户提到 COS、对象存储、Bucket、上传文件、临时分享链接、签名 URL、下载直链时使用此 skill。",
        "tags": {
            "latest": "k97cwx6mf9vktqddm8kh4895bh83jf0n"
        },
        "updatedAt": 1774427214067
    }
}