47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it says (fetches wttr.in and charges via SkillPay), but it contains an embedded SkillPay API key in both SKILL.md and the code and fails to declare required credential/env u...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774413728096,
        "_id": "k975gwcafz3px02jzg4475c6md83jkvx",
        "changelog": "SkillPay: API URL更新，SKILL_ID已配置",
        "changelogSource": "user",
        "createdAt": 1774413728096,
        "version": "1.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17bn6068w1enskxy8393kgbax83jhkc",
        "displayName": "loverun321",
        "handle": "loverun321",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/222489895?v=4",
        "kind": "user",
        "linkedUserId": "kn7ftmj84wj2dka6fgbh48a0as82bnz4"
    },
    "ownerHandle": "loverun321",
    "skill": {
        "_creationTime": 1772725657441,
        "_id": "kd781k0cve34wza4n2qfpz4tb982bst2",
        "badges": [],
        "createdAt": 1772725657441,
        "displayName": "Weather Skill",
        "latestVersionId": "k975gwcafz3px02jzg4475c6md83jkvx",
        "ownerPublisherId": "s17bn6068w1enskxy8393kgbax83jhkc",
        "ownerUserId": "kn7ftmj84wj2dka6fgbh48a0as82bnz4",
        "slug": "weather-skill",
        "stats": {
            "comments": 0,
            "downloads": 258,
            "installsAllTime": 7,
            "installsCurrent": 7,
            "stars": 0,
            "versions": 2
        },
        "summary": "Get the current temperature in Celsius for any city, using free weather data from wttr.in with a 0.001 USDT pay-per-call fee.",
        "tags": {
            "latest": "k975gwcafz3px02jzg4475c6md83jkvx"
        },
        "updatedAt": 1774415876374
    }
}