47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill mostly matches its stated purpose (QQ IMAP/SMTP client) but includes hard-coded QQ credentials and disables TLS certificate verification, which is disproportionate and risky.

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774303354305,
        "_id": "k977f1c696qp634vn3xw4d1cj983ejmg",
        "changelog": "wan-qq-email v1.0.0\n\n- Initial release\n- Read and search QQ emails via IMAP\n- Send, reply, and forward emails using SMTP\n- List and manage email folders\n- Access email content and attachments\n- Requires only Python standard libraries (imaplib, smtplib)",
        "changelogSource": "auto",
        "createdAt": 1774303354305,
        "parsed": {
            "clawdis": {
                "emoji": "📧"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s173gtz9bdj25x2gwsztmsw0sh83e461",
        "displayName": "Wu Di",
        "handle": "starryforest-ymxk",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/100527234?v=4",
        "kind": "user",
        "linkedUserId": "kn786jna57mvyqvhcqf6a6tb0980tw7d"
    },
    "ownerHandle": "starryforest-ymxk",
    "skill": {
        "_creationTime": 1774303354305,
        "_id": "kd7c46pqhftya9wph87kgy8p8983fsr5",
        "badges": [],
        "createdAt": 1774303354305,
        "displayName": "Wan Qq Email",
        "latestVersionId": "k977f1c696qp634vn3xw4d1cj983ejmg",
        "ownerPublisherId": "s173gtz9bdj25x2gwsztmsw0sh83e461",
        "ownerUserId": "kn786jna57mvyqvhcqf6a6tb0980tw7d",
        "slug": "wan-qq-email",
        "stats": {
            "comments": 0,
            "downloads": 13,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "QQ Email IMAP\/SMTP client. Use Python imaplib and smtplib to read and send QQ emails without Himalaya.",
        "tags": {
            "latest": "k977f1c696qp634vn3xw4d1cj983ejmg"
        },
        "updatedAt": 1774303906765
    }
}