41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's code and install scripts largely match a Tencent COS integration, but it silently requires and persistently stores sensitive Tencent Cloud credentials and the registry metadata incorrectly...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772789872528,
        "_id": "k97dsj17fp549g5wp83egcfwm582cqhd",
        "changelog": "**tencentcloud-cos v1.0.6**\n\n- 新增支持自定义域名、服务域名及协议配置（Domain、ServiceDomain、Protocol），安装与使用流程同步完善。\n- `setup.sh` 现在支持更多参数，可接收 `--domain`、`--service-domain`、`--protocol` 等选项。\n- Node.js SDK 脚本和 COSCMD 流程说明，完善了自定义域名环境变量传递和兼容性提示。\n- 文档中增补了各自定义参数用途和作用范围说明。\n- 兼容性和参数校验流程细化，提升多环境适用性和用户体验。",
        "changelogSource": "user",
        "createdAt": 1772789872528,
        "parsed": {
            "clawdis": {
                "emoji": "☁️",
                "install": [
                    {
                        "bins": [
                            "mcporter"
                        ],
                        "id": "node-mcporter",
                        "kind": "node",
                        "label": "Install mcporter (MCP CLI)",
                        "package": "mcporter"
                    },
                    {
                        "bins": [
                            "cos-mcp"
                        ],
                        "id": "node-cos-mcp",
                        "kind": "node",
                        "label": "Install cos-mcp (COS MCP Server)",
                        "package": "cos-mcp"
                    },
                    {
                        "id": "node-cos-sdk",
                        "kind": "node",
                        "label": "Install COS Node.js SDK",
                        "package": "cos-nodejs-sdk-v5"
                    }
                ]
            }
        },
        "version": "1.0.6"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ShawnmZhang",
        "handle": "shawnminh",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/31064728?v=4",
        "kind": "user",
        "linkedUserId": "kn75r0rammt45k8qe5we0sh63580c5y0"
    },
    "ownerHandle": "shawnminh",
    "skill": {
        "_creationTime": 1770346762052,
        "_id": "kd7frxfq714fwk3bvmfv8n5rkn80me8c",
        "badges": [],
        "createdAt": 1770346762052,
        "displayName": "Tencent Cloud COS",
        "latestVersionId": "k97dsj17fp549g5wp83egcfwm582cqhd",
        "ownerUserId": "kn75r0rammt45k8qe5we0sh63580c5y0",
        "slug": "tencentcloud-cos",
        "stats": {
            "comments": 0,
            "downloads": 1479,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 4
        },
        "summary": "腾讯云对象存储(COS)和数据万象(CI)集成技能。当用户需要上传、下载、管理云存储文件， 或需要进行图片处理（质量评估、超分辨率、抠图、二维码识别、水印）、智能图片搜索、 文档转PDF、视频智能封面生成等操作时使用此技能。",
        "tags": {
            "latest": "k97dsj17fp549g5wp83egcfwm582cqhd"
        },
        "updatedAt": 1774322946099
    }
}