41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement the stated Markdown todo/Drive workflow, but its code reads/writes secret files, expects Drive/gog credentials and uses sudo/external CLI calls while the registry metada...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771095580621,
        "_id": "k971ye66vxrfa4va1cd1p4jcv18157gm",
        "changelog": "todolist-md-clawdbot 1.0.0 — Initial release\n\n- Provides bot-assisted review and editing of todolist-md Markdown todo files.\n- Uses only line-stable  markers for any write-back changes.\n- Integrates with storage backends like Google Drive, local folders, or S3, respecting file identity and change detection.\n- Ensures LLM operations only on changed files, reducing token usage and minimizing costs.\n- Allows opt-in\/opt-out file-level control via config file or in-file marker.\n- Never marks tasks as complete without explicit user confirmation.",
        "changelogSource": "auto",
        "createdAt": 1771095580621,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "NitsujY",
        "handle": "nitsujy",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/2851659?v=4",
        "kind": "user",
        "linkedUserId": "kn7eef4bcakev7qgqhdnyj1wqs814dhe"
    },
    "ownerHandle": "nitsujy",
    "skill": {
        "_creationTime": 1771095580621,
        "_id": "kd74978e0gmnts57fnzxt8rsc9814hnb",
        "badges": [],
        "createdAt": 1771095580621,
        "displayName": "Todolist Md Clawdbot",
        "latestVersionId": "k971ye66vxrfa4va1cd1p4jcv18157gm",
        "ownerUserId": "kn7eef4bcakev7qgqhdnyj1wqs814dhe",
        "slug": "todolist-md-clawdbot",
        "stats": {
            "comments": 0,
            "downloads": 509,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Read, summarize, propose edits, and write back changes for Markdown todo files using line-stable bot markers without altering task identity.",
        "tags": {
            "latest": "k971ye66vxrfa4va1cd1p4jcv18157gm"
        },
        "updatedAt": 1774324805573
    }
}