65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (an MCP server offering developer utilities) is plausible, but there are mismatches and unverified risks — chiefly that the runtime is an npm package executed via npx (remot...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774416970404,
        "_id": "k97830qqsb4epk79y2fs0jk90583kw21",
        "changelog": "Added security transparency section: no secrets required, documented all external endpoints, linked GitHub repo and npm package",
        "changelogSource": "user",
        "createdAt": 1774416970404,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "2.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175xrq6x3cqftxqsebzpa0vbx83k7h3",
        "displayName": "Lisa Maraventano",
        "handle": "lisamaraventano-spine",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/261433524?v=4",
        "kind": "user",
        "linkedUserId": "kn7cpy1x01n3hwk2ha7fn5t0cd83acmb"
    },
    "ownerHandle": "lisamaraventano-spine",
    "skill": {
        "_creationTime": 1774413117482,
        "_id": "kd7e5qqcz4wmwahqr72nd5g66n83kb29",
        "badges": [],
        "createdAt": 1774413117482,
        "displayName": "The Underground Cultural District",
        "latestVersionId": "k97830qqsb4epk79y2fs0jk90583kw21",
        "ownerPublisherId": "s175xrq6x3cqftxqsebzpa0vbx83k7h3",
        "ownerUserId": "kn7cpy1x01n3hwk2ha7fn5t0cd83acmb",
        "slug": "underground-cultural-district",
        "stats": {
            "comments": 0,
            "downloads": 0,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 2
        },
        "summary": "MCP server for The Underground Cultural District — 25 tools including free developer utilities (UUID, JSON, Base64, hashing, JWT, regex, cron, ETH conversion...",
        "tags": {
            "latest": "k97830qqsb4epk79y2fs0jk90583kw21"
        },
        "updatedAt": 1774416999911
    }
}