47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's declared purpose (querying TTPOS data) matches the single API key it requests, but the skill will construct and POST arbitrary SQL to a remote service of unknown provenance and includes be...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773899679909,
        "_id": "k977zxjd3d8wfcapxedznhx5d9837f9k",
        "changelog": "ttpos-agent 1.0.1\n\n- No file changes detected in this version.\n- No modifications made to documentation or code.\n- Functionality and usage remain unchanged from previous version.",
        "changelogSource": "auto",
        "createdAt": 1773899679909,
        "parsed": {
            "clawdis": {
                "emoji": "📊",
                "primaryEnv": "LIGHT_BRIDGE_API_KEY",
                "requires": {
                    "env": [
                        "LIGHT_BRIDGE_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "BenDaye",
        "handle": "bendaye",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/26397675?v=4",
        "kind": "user",
        "linkedUserId": "kn7bg00vr3ay60svnyhrfxnpds831sxq"
    },
    "ownerHandle": "bendaye",
    "skill": {
        "_creationTime": 1773899241652,
        "_id": "kd78d5at5e5bnhdvh3d9yps0d1837d27",
        "badges": [],
        "createdAt": 1773899241652,
        "displayName": "TTPOS Agent",
        "latestVersionId": "k977zxjd3d8wfcapxedznhx5d9837f9k",
        "ownerUserId": "kn7bg00vr3ay60svnyhrfxnpds831sxq",
        "slug": "ttpos-agent",
        "stats": {
            "comments": 0,
            "downloads": 50,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 2
        },
        "summary": "通过 ttpos-agent API 查询 TTPOS 餐饮系统营业数据，生成报表。使用前必须访问 GET \/api\/v1\/query\/guide 获取数据查询指南。Use when: 今日营业额、订单统计、支付方式、菜品排行、会员分析、班次汇总、时段分析等。NOT for: 与 TTPOS 数据无关的问题。",
        "tags": {
            "latest": "k977zxjd3d8wfcapxedznhx5d9837f9k"
        },
        "updatedAt": 1774337739593
    }
}