55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill generally matches a delivery integration, but it contains surprising behaviors (auto-creating orders without reconfirmation, bundled default app credentials, and automatic collection/transmi...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774835729073,
        "_id": "k9719hkc1mc3rdfxgq69a72fad83xwzh",
        "changelog": "- No file changes detected in this release.\n- Version incremented to 1.0.9; no new features, fixes, or documentation updates included.\n- All functionality remains unchanged from previous version.",
        "changelogSource": "user",
        "createdAt": 1774835729073,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/open.uupt.com",
                "install": [
                    {
                        "kind": "node",
                        "package": "axios"
                    }
                ],
                "requires": {
                    "bins": [
                        "node",
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.9"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s178cybzbfaepvy5nb66hhgrwx83p45m",
        "displayName": "uupt-mcp",
        "handle": "uupt-mcp",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/207802739?v=4",
        "kind": "user",
        "linkedUserId": "kn75ryt281tjmq1ge7t1wcwvx983pdc7"
    },
    "ownerHandle": "uupt-mcp",
    "skill": {
        "_creationTime": 1774596482144,
        "_id": "kd7b4ems1g6y48t9rz0ptycr3183pzp2",
        "badges": [],
        "canonicalSkillId": "kd70q1v97zphwrm4pe4pz14z3h83q2dc",
        "createdAt": 1774596482144,
        "displayName": "uupt-delivery",
        "forkOf": {
            "at": 1774596482144,
            "kind": "duplicate",
            "skillId": "kd70q1v97zphwrm4pe4pz14z3h83q2dc"
        },
        "latestVersionId": "k9719hkc1mc3rdfxgq69a72fad83xwzh",
        "ownerPublisherId": "s178cybzbfaepvy5nb66hhgrwx83p45m",
        "ownerUserId": "kn75ryt281tjmq1ge7t1wcwvx983pdc7",
        "slug": "uupt-delivery",
        "stats": {
            "comments": 0,
            "downloads": 95,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 10
        },
        "summary": "UU跑腿同城配送服务。支持订单询价、发单下单、查询订单、取消订单、骑手实时追踪。当用户表达任何与\"送\"、\"取\"、\"寄\"、\"跑腿\"、\"发单\"、\"配送\"相关的配送需求时使用此skill。",
        "tags": {
            "latest": "k9719hkc1mc3rdfxgq69a72fad83xwzh"
        },
        "updatedAt": 1774836107508
    }
}