41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly does what it claims (image/video/file analysis) but contains implementation choices that could exfiltrate arbitrary local files and even embeds an API key in the repo — these are disp...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772890915404,
        "_id": "k976dtz0ndtxr44jpfn3twenq582e1xf",
        "changelog": "- Initial release of video-image-file-analysis skill.\n- Supports analysis and recognition of local images, network images, videos, and files.\n- Integrates Zhipu GLM-4V and Qwen Qwen-VL visual models for versatile applications.\n- Provides command-line interface for analyzing images, comparing images, video summarization, OCR, object detection, and supports JSON output.\n- Configurable via config.json with API keys for Zhipu and Qwen.\n- Specifies model selection guidelines and important usage notes (e.g., file size limits, supported formats, special \"thinking\" mode for Zhipu).",
        "changelogSource": "user",
        "createdAt": 1772890915404,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "AI-4-Chinese",
        "handle": "jaccchina-ai",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/253219127?v=4",
        "kind": "user",
        "linkedUserId": "kn7bb6tkjndgyzp6fh2vgvagq982ee7c"
    },
    "ownerHandle": "jaccchina-ai",
    "skill": {
        "_creationTime": 1772890915404,
        "_id": "kd73p6c57g4p9agg1s1cjsxye182ejkz",
        "badges": [],
        "createdAt": 1772890915404,
        "displayName": "Video Image & File Analysis 多模态视觉视频图片文件分析专家",
        "latestVersionId": "k976dtz0ndtxr44jpfn3twenq582e1xf",
        "ownerUserId": "kn7bb6tkjndgyzp6fh2vgvagq982ee7c",
        "slug": "video-image-file-analysis",
        "stats": {
            "comments": 0,
            "downloads": 604,
            "installsAllTime": 3,
            "installsCurrent": 3,
            "stars": 0,
            "versions": 1
        },
        "summary": "图片分析与识别，可分析本地图片、网络图片、视频、文件。适用于 OCR、物体识别、场景理解等。当用户发送图片或要求分析图片时必须使用此技能。",
        "tags": {
            "latest": "k976dtz0ndtxr44jpfn3twenq582e1xf"
        },
        "updatedAt": 1774330333441
    }
}