47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's stated purpose (send WeCom messages) is plausible, but the bundle contains plaintext corporate credentials and provides no implementation or install instructions for the referenced CLI, wh...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773413837069,
        "_id": "k97dfk76pez5ryp1eh346ga08182vd38",
        "changelog": "首次发布：支持发送文本、图片、文件到企业微信应用",
        "changelogSource": "user",
        "createdAt": 1773413837069,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "yogurtliu",
        "handle": "yogurtliu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/23228919?v=4",
        "kind": "user",
        "linkedUserId": "kn761pqs3vrrdhmstnamqzt70582ehfb"
    },
    "ownerHandle": "yogurtliu",
    "skill": {
        "_creationTime": 1773413837069,
        "_id": "kd77za6e5hmnset5tge7s68ran82vfkc",
        "badges": [],
        "createdAt": 1773413837069,
        "displayName": "企业微信应用消息",
        "latestVersionId": "k97dfk76pez5ryp1eh346ga08182vd38",
        "ownerUserId": "kn761pqs3vrrdhmstnamqzt70582ehfb",
        "slug": "wecom-agent-message",
        "stats": {
            "comments": 0,
            "downloads": 256,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Send text, image, or file messages to specified users via WeCom applications using configured corporate credentials.",
        "tags": {
            "enterprise-wechat": "k97dfk76pez5ryp1eh346ga08182vd38",
            "latest": "k97dfk76pez5ryp1eh346ga08182vd38",
            "message": "k97dfk76pez5ryp1eh346ga08182vd38",
            "wecom": "k97dfk76pez5ryp1eh346ga08182vd38"
        },
        "updatedAt": 1774333176843
    }
}