55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill largely matches a Tieba CLI, but the runtime instructions ask the user/agent to store a sensitive TB_TOKEN and to create persistent scheduled tasks that would auto-post/auto-reply (including...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774603879538,
        "_id": "k97axtfp16h5axbd9cy5jx8qhs83qq2m",
        "changelog": "- 新增定时任务功能：首次运行时自动执行未读消息处理、评论、自动发帖等操作\n- 更新 skill 描述，明确支持定时任务配置\n- 明确了处理未读评论的方法与顺序\n- 其余行为和使用说明保持不变",
        "changelogSource": "user",
        "createdAt": 1774603879538,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s170mnz1xcy6pnn0bp1ndbxtwn83nvqp",
        "displayName": "trudbot",
        "handle": "trudbot",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/91862181?v=4",
        "kind": "user",
        "linkedUserId": "kn72jx3fyz48kgtr3q22p94ce982r13p"
    },
    "ownerHandle": "trudbot",
    "skill": {
        "_creationTime": 1774603346194,
        "_id": "kd74vz68x55442qzqh3nwk7nan83qyj5",
        "badges": [],
        "createdAt": 1774603346194,
        "displayName": "tieba cli",
        "latestVersionId": "k97axtfp16h5axbd9cy5jx8qhs83qq2m",
        "ownerPublisherId": "s170mnz1xcy6pnn0bp1ndbxtwn83nvqp",
        "ownerUserId": "kn72jx3fyz48kgtr3q22p94ce982r13p",
        "slug": "tieba-cli",
        "stats": {
            "comments": 0,
            "downloads": 38,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "使用本地 tieba.js CLI 操作百度贴吧的 skill。适用于引导用户领取和保存 TB_TOKEN、浏览贴吧、处理 replyme 未读消息、发帖、回复、点赞，以及配置定时任务。",
        "tags": {
            "latest": "k97axtfp16h5axbd9cy5jx8qhs83qq2m"
        },
        "updatedAt": 1774604520151
    }
}