37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code mostly matches its advertised functions (search/download/rewrites/publish), but the package metadata omits important runtime requirements and the scripts perform filesystem, network, ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774769481690,
        "_id": "k97fqzcr24yqbyvqtamr9h0b7d83tgv7",
        "changelog": "Version 1.0.3\n\n- Added vendor\/wenyan-cli-main (完整 wenyan-cli 源码与工具链)，支持脱离全局依赖独立运行\n- 新增 scripts\/bootstrap\/install_wenyan.js 一键本地安装 wenyan-cli\n- 发布模块：草稿箱\/已发布文章支持管理，新增 manage_draft.js 脚本\n- 发布说明与用法全面升级，细化绝对路径要求和图片命名规范，支持封面\/插图自动生成\n- 所有 wenyan-cli 操作可通过本地 vendor 目录独立实现，无需全局 npm 安装",
        "changelogSource": "user",
        "createdAt": 1774769481690,
        "parsed": {
            "clawdis": {
                "emoji": "📦",
                "install": [
                    {
                        "bins": [
                            "node"
                        ],
                        "formula": "node",
                        "id": "node-brew",
                        "kind": "brew",
                        "label": "Install Node.js (brew)"
                    }
                ],
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17324ax9fydwk7qwsx3smeapx83v630",
        "displayName": "MrQ",
        "handle": "mr-q526",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/183293891?v=4",
        "kind": "user",
        "linkedUserId": "kn757qqsc7myx5e40qvf212q918259v3"
    },
    "ownerHandle": "mr-q526",
    "skill": {
        "_creationTime": 1772613969806,
        "_id": "kd78xjxsg7c85ca6ez4qvb1wys829q5h",
        "badges": [],
        "createdAt": 1772613969806,
        "displayName": "微信公众号工具包",
        "latestVersionId": "k97fqzcr24yqbyvqtamr9h0b7d83tgv7",
        "ownerPublisherId": "s17324ax9fydwk7qwsx3smeapx83v630",
        "ownerUserId": "kn757qqsc7myx5e40qvf212q918259v3",
        "slug": "wechat-toolkit",
        "stats": {
            "comments": 1,
            "downloads": 1922,
            "installsAllTime": 25,
            "installsCurrent": 25,
            "stars": 10,
            "versions": 4
        },
        "summary": "微信公众号一站式工具包 — 集成文章搜索、文章下载、AI洗稿改写、公众号发布四大功能。当用户需要搜索\/下载\/改写\/发布微信公众号文章时使用。",
        "tags": {
            "latest": "k97fqzcr24yqbyvqtamr9h0b7d83tgv7"
        },
        "updatedAt": 1774773711695
    }
}