55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's stated purpose (WeCom / Enterprise WeChat MCP integration) matches the code and docs, but there are clear metadata/instruction inconsistencies and a few minor risks (build/publish scripts ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774175977122,
        "_id": "k97dhdmad96h6dfpk8tsn75j6x83ctbd",
        "changelog": "wecom-deep-op v2.0.2\n\n- Bump version to 2.0.2\n- Update documentation in SKILL.md to match latest version and usage conventions\n- Update metadata and config files (CHANGELOG.md, _meta.json, skill.yml) for version alignment and completeness\n- Minor clarifications and consistency fixes across documentation\n- No functional logic or interface changes in this release",
        "changelogSource": "auto",
        "createdAt": 1774175977122,
        "parsed": {
            "clawdis": {
                "author": "老白",
                "dependencies": [
                    {
                        "name": "@wecom\/wecom-openclaw-plugin",
                        "type": "npm",
                        "version": ">=1.0.13"
                    },
                    {
                        "name": "openclaw",
                        "type": "other",
                        "version": ">=0.5.0"
                    }
                ]
            }
        },
        "version": "2.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Bingbox",
        "handle": "bingbox",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7250254?v=4",
        "kind": "user",
        "linkedUserId": "kn7dznprnf314jyj509jk3yjwx832hf3"
    },
    "ownerHandle": "bingbox",
    "skill": {
        "_creationTime": 1774075647135,
        "_id": "kd704yk38x40x5fpwwcr79962983bnd6",
        "badges": [],
        "createdAt": 1774075647135,
        "displayName": "Wecom Deep Op",
        "latestVersionId": "k97dhdmad96h6dfpk8tsn75j6x83ctbd",
        "ownerUserId": "kn7dznprnf314jyj509jk3yjwx832hf3",
        "slug": "wecom-deep-op",
        "stats": {
            "comments": 0,
            "downloads": 59,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 9
        },
        "summary": "基于微信官方插件 @wecom\/wecom-openclaw-plugin v1.0.13+，封装的一站式企业微信自动化解决方案 - 你可以方便操作文档、日历、会议、待办、通讯录所有企业微信MCP能力，充分发挥OpenClaw与企业微信的协同能力。",
        "tags": {
            "latest": "k97dhdmad96h6dfpk8tsn75j6x83ctbd",
            "v1.0.0": "k979vd4cyfj1t6n410mfajp2ex83b96y"
        },
        "updatedAt": 1774180312740
    }
}