47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

功能与描述大体一致，但声明与实际行为不一致：脚本会读取凭证文件（并在某个脚本中从全局 TOOLS.md 提取凭证）并将 App Secret 等敏感信息传给远端 MCP 服务；此外声明的依赖和安装说明也有遗漏，建议在信任远端服务器并做额外防护前不要在敏感环境中安装。

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773129787108,
        "_id": "k972b8fn4v5jxtxvzxes2mzxvh82nyse",
        "changelog": "- Initial release: Remote WeChat Official Account publishing skill with compliance-optimized architecture.\n- Bypasses local IP whitelist issues via remote MCP relay service.\n- Credentials and configuration are isolated for security and compliance.\n- Automatic environment dependency checks for mcporter, jq, and wenyan-cli.\n- Supports flexible MCP configuration paths and easy credential setup.\n- Provides both smart assistant and command-line script publishing modes.",
        "changelogSource": "user",
        "createdAt": 1773129787108,
        "parsed": {
            "clawdis": {
                "emoji": "🚀",
                "install": [
                    {
                        "bins": [
                            "mcporter"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "安装 MCP 客户端 (mcporter)",
                        "package": "mcporter"
                    }
                ],
                "requires": {
                    "bins": [
                        "mcporter",
                        "curl",
                        "jq"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "cp33333333333",
        "handle": "cp33333333333",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/219774774?v=4",
        "kind": "user",
        "linkedUserId": "kn7196k9gv8tybbs43ftxgqba182kmdt"
    },
    "ownerHandle": "cp33333333333",
    "skill": {
        "_creationTime": 1773129787108,
        "_id": "kd77r3txtq831fysvjzmfddzk982na33",
        "badges": [],
        "createdAt": 1773129787108,
        "displayName": "wechat-mp-publisher",
        "latestVersionId": "k972b8fn4v5jxtxvzxes2mzxvh82nyse",
        "ownerUserId": "kn7196k9gv8tybbs43ftxgqba182kmdt",
        "slug": "wechat-mp-publisher1",
        "stats": {
            "comments": 0,
            "downloads": 152,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "远程微信公众号发布技能 (合规优化版)。通过 HTTP MCP 解决家用宽带 IP 变动问题，支持安全凭证隔离与依赖检查。",
        "tags": {
            "latest": "k972b8fn4v5jxtxvzxes2mzxvh82nyse"
        },
        "updatedAt": 1774331285207
    }
}