55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill mostly does what it says (uses yt-dlp to download Twitter/X videos), but the declared requirements are inconsistent with the code and the PROXY_URL env var is marked as required even though ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773474089332,
        "_id": "k971c1pdefkzbgj3gd4x8jsjbd82w6t0",
        "changelog": "- Added a new \"Security Notes\" section detailing measures like no shell execution, URL and filename validation, proxy validation, and trusted library usage.\n- Clarified that a proxy is only required for China users.\n- Added a call-to-action encouraging users to star the project on ClawHub to support and help others discover it.",
        "changelogSource": "user",
        "createdAt": 1773474089332,
        "parsed": {
            "clawdis": {
                "emoji": "🎬",
                "requires": {
                    "bins": [
                        "python",
                        "pip"
                    ],
                    "env": [
                        "PROXY_URL"
                    ]
                }
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Lemonpek66",
        "handle": "lemonpek66",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/105149416?v=4",
        "kind": "user",
        "linkedUserId": "kn7879k60dazyresxmgjw98v8x82pjb1"
    },
    "ownerHandle": "lemonpek66",
    "skill": {
        "_creationTime": 1773287833819,
        "_id": "kd7bhqxsafbhe9hmwsqs3z66bh82rn6y",
        "badges": [],
        "createdAt": 1773287833819,
        "displayName": "Twitter Video Download",
        "latestVersionId": "k971c1pdefkzbgj3gd4x8jsjbd82w6t0",
        "ownerUserId": "kn7879k60dazyresxmgjw98v8x82pjb1",
        "slug": "twitter-video-download",
        "stats": {
            "comments": 0,
            "downloads": 187,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 3
        },
        "summary": "Download videos from Twitter\/X posts. Just give it a tweet URL and it will download the video to your specified location.",
        "tags": {
            "latest": "k971c1pdefkzbgj3gd4x8jsjbd82w6t0"
        },
        "updatedAt": 1774332251565
    }
}