65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill appears to implement Tencent Cloud VatInvoiceOCR and legitimately needs Tencent API credentials, but the package metadata omits those required environment variables and thus the manifest and...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773110552454,
        "_id": "k977at9m75bxgs0mcxa759mtg582mgjh",
        "changelog": "- 新增请求参数 UserAgent用于标识请求来源\n- 其余功能和接口保持不变",
        "changelogSource": "user",
        "createdAt": 1773110552454,
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "tencent-ocr",
        "handle": "zt1314p-design",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/246965649?v=4",
        "kind": "user",
        "linkedUserId": "kn71qd8mtdsrf1bsagg94kx5tn82dqt6"
    },
    "ownerHandle": "zt1314p-design",
    "skill": {
        "_creationTime": 1772809508538,
        "_id": "kd7bcfkz1rv0b8f4tt2y1rwxpn82c416",
        "badges": [],
        "createdAt": 1772809508538,
        "displayName": "TencentCloud VatInvoice OCR",
        "latestVersionId": "k977at9m75bxgs0mcxa759mtg582mgjh",
        "ownerUserId": "kn71qd8mtdsrf1bsagg94kx5tn82dqt6",
        "slug": "tencentcloud-ocr-vatinvoice",
        "stats": {
            "comments": 0,
            "downloads": 201,
            "installsAllTime": 2,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 3
        },
        "summary": "腾讯云通用票据识别高级版(VatInvoiceOCR)接口调用技能。当用户需要识别发票图片中增值税专用发票、增值税普通发票、增值税电子专票、增值税电子普票、电子发票（普通\/增值税专用）的全字段信息时,应使用此技能。支持识别发票图片中的发票代码、发票号码、开票日期、合计金额、校验码、税率、合计税额、价税合计、购买方...",
        "tags": {
            "latest": "k977at9m75bxgs0mcxa759mtg582mgjh"
        },
        "updatedAt": 1774330013442
    }
}