55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill implements a plausible WeChat Work ↔ OpenClaw adapter, but the package metadata omits required sensitive environment variables and the code/logging/operation contain several inconsistencies ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773418808389,
        "_id": "k97ajwm1kkxfagn62jtrk1rfvd82tdz9",
        "changelog": "Initial release with all battle-tested fixes: msg_signature verification, AES-256-CBC decryption, async reply pattern, IP whitelist handling",
        "changelogSource": "user",
        "createdAt": 1773418808389,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "richagain",
        "handle": "richagain",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/8521779?v=4",
        "kind": "user",
        "linkedUserId": "kn7emfv3yw91vb18wk289vxxmx82tvda"
    },
    "ownerHandle": "richagain",
    "skill": {
        "_creationTime": 1773418808389,
        "_id": "kd702cnn2m8tj97jwpgkas4jpd82v5zh",
        "badges": [],
        "createdAt": 1773418808389,
        "displayName": "WeChat Work OpenClaw Adapter",
        "latestVersionId": "k97ajwm1kkxfagn62jtrk1rfvd82tdz9",
        "ownerUserId": "kn7emfv3yw91vb18wk289vxxmx82tvda",
        "slug": "wecom-openclaw",
        "stats": {
            "comments": 0,
            "downloads": 333,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Integrate WeChat Work (Enterprise WeChat) with OpenClaw for intelligent messaging. Enables receiving messages from WeChat Work, processing them with Claude A...",
        "tags": {
            "latest": "k97ajwm1kkxfagn62jtrk1rfvd82tdz9"
        },
        "updatedAt": 1774333226994
    }
}