41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill claims to publish to Mastodon and includes a runnable script, but its declared metadata does not list the sensitive environment variables and required binary the SKILL.md asks for, and the s...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769504284945,
        "_id": "k970gxnjfzp8v9w9cx7xqp9a5x800mx6",
        "changelog": "tootbot 0.5.0\n\n- Switched implementation to use Bun instead of Node.js.\n- Updated usage to accept JSON input; supports batch posting of multiple statuses.\n- Added support for more flexible media attachments via JSON objects.\n- Expanded trigger phrases to include \"publish status to mastodon\".\n- Provided guidance for required environment variables (MASTODON_URL, MASTODON_ACCESS_TOKEN).",
        "changelogSource": "user",
        "createdAt": 1769504284945,
        "parsed": {
            "clawdis": {
                "emoji": "🐘"
            }
        },
        "version": "0.5.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "behrangsa",
        "handle": "behrangsa",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/18451?v=4",
        "kind": "user",
        "linkedUserId": "kn74jrqamce73srvpnq45t14vx7zym25"
    },
    "ownerHandle": "behrangsa",
    "skill": {
        "_creationTime": 1769469207305,
        "_id": "kd79xn660c44ymatwt8wprxmfn7zyjhg",
        "badges": [],
        "createdAt": 1769469207305,
        "displayName": "Tootbot",
        "latestVersionId": "k970gxnjfzp8v9w9cx7xqp9a5x800mx6",
        "ownerUserId": "kn74jrqamce73srvpnq45t14vx7zym25",
        "slug": "tootbot",
        "stats": {
            "comments": 0,
            "downloads": 2417,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 7
        },
        "summary": "Publish content to Mastodon. Use when you need to post a Mastodon status.",
        "tags": {
            "latest": "k970gxnjfzp8v9w9cx7xqp9a5x800mx6"
        },
        "updatedAt": 1774321569561
    }
}