41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's behavior (calling 途牛 MCP via curl and sending user PII) matches its stated purpose, but there is an internal metadata inconsistency about required environment variables and the skill comes...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772275021601,
        "_id": "k9723qm2zt3p5ap2chf6wc3qz5821z6k",
        "changelog": "Tuniu Tickets 1.0.0 – First public release:\n\n- Supports querying ticket types and prices for attractions by name.\n- Enables order creation for tickets after user confirmation.\n- All API interactions handled via exec + curl with MCP service.\n- Requires TUNIU_API_KEY for authentication; supports API endpoint override.\n- Handles user personal info securely; PII only sent for orders, not logged or exposed.\n- Includes detailed usage instructions, error handling, and output formatting guidelines.",
        "changelogSource": "user",
        "createdAt": 1772275021601,
        "parsed": {
            "clawdis": {
                "emoji": "🎫",
                "requires": {
                    "bins": [
                        "curl"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Leonardoooooo",
        "handle": "leonardoooooo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/2190878?v=4",
        "kind": "user",
        "linkedUserId": "kn7bc8chgvfzqsf2s965yfwd4580pdvz"
    },
    "ownerHandle": "leonardoooooo",
    "skill": {
        "_creationTime": 1772275021601,
        "_id": "kd7at0hhbmt39wrtjgjxwbar3x820hnj",
        "badges": [],
        "createdAt": 1772275021601,
        "displayName": "途牛门票预订技能",
        "latestVersionId": "k9723qm2zt3p5ap2chf6wc3qz5821z6k",
        "ownerUserId": "kn7bc8chgvfzqsf2s965yfwd4580pdvz",
        "slug": "tn-tickets-bot",
        "stats": {
            "comments": 0,
            "downloads": 276,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "途牛门票助手 - 通过 exec + curl 调用 MCP 实现景点门票查询、订单创建。适用于用户询问某景点门票价格、票型或提交门票订单时使用。",
        "tags": {
            "latest": "k9723qm2zt3p5ap2chf6wc3qz5821z6k"
        },
        "updatedAt": 1774327836019
    }
}