65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's code and README require a WCRSS_API_KEY and write a local cache, but the registry metadata does not declare the required environment variable or the Python dependency — likely an oversight...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774670118147,
        "_id": "k97a5fm0x4petcbgwpa8c1t46183rw99",
        "changelog": "wechat-rss 1.0.0 initial release:\n\n- Allows fetching and displaying of the latest articles from WeChat official accounts via the wcrss.com API.\n- Supports commands to fetch article lists, get individual articles, and count total articles.\n- Requires setup of a WCRSS API key through environment variables.\n- Provides step-by-step workflow for agents, including error handling and article summarization prompts.",
        "changelogSource": "user",
        "createdAt": 1774670118147,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s175jq66wf4baq3h3apfxv7eph83s709",
        "displayName": "blackomw",
        "handle": "blackomw",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/33241163?v=4",
        "kind": "user",
        "linkedUserId": "kn72d3r47n9j3vh4rhqqx1yd3982hzhk"
    },
    "ownerHandle": "blackomw",
    "skill": {
        "_creationTime": 1774670118147,
        "_id": "kd7asf2j2kppjwk2n10xknzq4n83r8jm",
        "badges": [],
        "createdAt": 1774670118147,
        "displayName": "WeChat RSS",
        "latestVersionId": "k97a5fm0x4petcbgwpa8c1t46183rw99",
        "ownerPublisherId": "s175jq66wf4baq3h3apfxv7eph83s709",
        "ownerUserId": "kn72d3r47n9j3vh4rhqqx1yd3982hzhk",
        "slug": "wechat-rss",
        "stats": {
            "comments": 0,
            "downloads": 24,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "通过 wcrss.com API 获取并展示微信公众号的最新文章。当用户请求查看微信公众号文章、获取公众号最新发布内容、阅读微信RSS订阅或浏览公众号内容时使用此技能。该技能会从环境变量 WCRSS_API_KEY 中读取 API Key，并调用 wcrss.com 的接口来获取文章数据。",
        "tags": {
            "latest": "k97a5fm0x4petcbgwpa8c1t46183rw99"
        },
        "updatedAt": 1774670811601
    }
}