65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's behavior (calling an external Tuniu MCP endpoint and sending passenger PII) matches its stated purpose, but there is an important metadata mismatch (the registry claims no required env var...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773369987063,
        "_id": "k97b96wbmq48pz0x4a0hntzhh982vww1",
        "changelog": "No changes detected between versions 1.0.0 and 1.0.2; this is a version bump only.\n\n- No new features, bug fixes, or documentation updates in this release.\n- All skill functionality remains the same as in the previous version.",
        "changelogSource": "user",
        "createdAt": 1773369987063,
        "parsed": {
            "clawdis": {
                "emoji": "✈️",
                "requires": {
                    "bins": [
                        "curl"
                    ]
                }
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Leonardoooooo",
        "handle": "leonardoooooo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/2190878?v=4",
        "kind": "user",
        "linkedUserId": "kn7bc8chgvfzqsf2s965yfwd4580pdvz"
    },
    "ownerHandle": "leonardoooooo",
    "skill": {
        "_creationTime": 1772623496952,
        "_id": "kd744escr872cmdm25qc8pqza1829va7",
        "badges": [],
        "createdAt": 1772623496952,
        "displayName": "途牛机票预订技能",
        "latestVersionId": "k97b96wbmq48pz0x4a0hntzhh982vww1",
        "ownerUserId": "kn7bc8chgvfzqsf2s965yfwd4580pdvz",
        "slug": "tuniu-flight",
        "stats": {
            "comments": 0,
            "downloads": 328,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 3
        },
        "summary": "途牛机票助手 - 通过 exec + curl 调用 MCP 实现国内航班搜索、舱位查询、预订下单。适用于用户询问航班、查询机票价格或提交机票订单时使用。",
        "tags": {
            "latest": "k97b96wbmq48pz0x4a0hntzhh982vww1"
        },
        "updatedAt": 1774329113813
    }
}