59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's behavior mostly matches its description (searching and adding torrents) but the registry metadata and SKILL.md disagree about whether an API key is required, and there are a few privacy/te...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771239437288,
        "_id": "k97b7ryn6ad2j8xynzw0aj5g6d818s49",
        "changelog": "Fix shell injection vulnerability in SKILL.md curl search commands. Replace direct URL interpolation with curl -G --data-urlencode for all user-supplied query parameters.",
        "changelogSource": "user",
        "createdAt": 1771239437288,
        "parsed": {
            "clawdis": {
                "emoji": "🎬",
                "os": [
                    "darwin",
                    "linux",
                    "win32"
                ],
                "primaryEnv": "TORRENTCLAW_API_KEY",
                "requires": {
                    "bins": [
                        "curl",
                        "bash",
                        "jq"
                    ],
                    "env": [
                        "TORRENTCLAW_API_KEY"
                    ]
                }
            }
        },
        "version": "0.1.17"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "buryni",
        "handle": "buryni",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/172052?v=4",
        "kind": "user",
        "linkedUserId": "kn7fz839dwrsvev2vqpc9ynn29813z25"
    },
    "ownerHandle": "buryni",
    "skill": {
        "_creationTime": 1771011692751,
        "_id": "kd79mcmk2zjapaps58vwq3ry2s812gfe",
        "badges": [],
        "createdAt": 1771011692751,
        "displayName": "TorrentClaw",
        "latestVersionId": "k97b7ryn6ad2j8xynzw0aj5g6d818s49",
        "ownerUserId": "kn7fz839dwrsvev2vqpc9ynn29813z25",
        "slug": "torrentclaw",
        "stats": {
            "comments": 0,
            "downloads": 603,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Search and download torrents via TorrentClaw. Use when the user asks to find, search, or download movies, TV shows, or torrents. Detects local torrent client...",
        "tags": {
            "latest": "k97b7ryn6ad2j8xynzw0aj5g6d818s49",
            "security": "k97b7ryn6ad2j8xynzw0aj5g6d818s49"
        },
        "updatedAt": 1772061040685
    }
}