72/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： benign

The skill's code and instructions match its stated purpose (a local Node.js TODO web UI that reads/writes TODO.md and can be autostarted via launchd); it requires no external credentials or downloads,...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773697932227,
        "_id": "k970edjmf0ccp8ghgeznk6h3q18315zz",
        "changelog": "Add preview screenshot",
        "changelogSource": "user",
        "createdAt": 1773697932227,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "jwhowa",
        "handle": "jwhowa",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/83919605?v=4",
        "kind": "user",
        "linkedUserId": "kn70kyfk9af824krnmv3gq0a0n831paf"
    },
    "ownerHandle": "jwhowa",
    "skill": {
        "_creationTime": 1773697651566,
        "_id": "kd72cm32mg5hxc11xjwe4a2kzs831qhx",
        "badges": [],
        "createdAt": 1773697651566,
        "displayName": "TODO Web App",
        "latestVersionId": "k970edjmf0ccp8ghgeznk6h3q18315zz",
        "ownerUserId": "kn70kyfk9af824krnmv3gq0a0n831paf",
        "slug": "todo-webapp",
        "stats": {
            "comments": 1,
            "downloads": 108,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "Deploy a local TODO web app that reads and writes a Markdown TODO.md file. Serves a beautiful dark-themed, glassmorphism UI on the LAN (no HTTPS needed). Fea...",
        "tags": {
            "latest": "k970edjmf0ccp8ghgeznk6h3q18315zz"
        },
        "updatedAt": 1774335508942
    }
}