41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill is mostly coherent with its Weibo API purpose, but the runtime CLI supports calling arbitrary URLs (and will attach stored access tokens), which raises a risk of accidental secret exfiltrati...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772326453053,
        "_id": "k972hr83snnj2qw365cg51f7xn8231e4",
        "changelog": "- Split Weibo web search fallback into a new companion skill (`weibo-brave-search`), focusing this skill solely on official Weibo API.\n- Overhauled credential instructions with a new section on secret handling, clarifying required variables and OpenClaw integration.\n- Updated skill description and metadata for clearer scope and environment configuration.\n- Added new companion and secret remediation documentation files; removed bundled web search fallback script.\n- CLI usage, workflow, and command set remain unchanged.",
        "changelogSource": "user",
        "createdAt": 1772326453053,
        "parsed": {
            "clawdis": {
                "homepage": "https:\/\/open.weibo.com\/",
                "primaryEnv": "WEIBO_APP_SECRET",
                "requires": {
                    "bins": [
                        "bash",
                        "curl",
                        "python3"
                    ],
                    "env": [
                        "WEIBO_APP_KEY",
                        "WEIBO_APP_SECRET",
                        "WEIBO_REDIRECT_URI"
                    ]
                },
                "skillKey": "weibo"
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "oscraters",
        "handle": "oscraters",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/93680161?v=4",
        "kind": "user",
        "linkedUserId": "kn72390bk8hntx5wcn3arsfzt981w02t"
    },
    "ownerHandle": "oscraters",
    "skill": {
        "_creationTime": 1772211579586,
        "_id": "kd7ay4fkprv4xz42y1z0p0y9tx81zqw2",
        "badges": [],
        "createdAt": 1772211579586,
        "displayName": "Weibo Microblogging CLI",
        "latestVersionId": "k972hr83snnj2qw365cg51f7xn8231e4",
        "ownerUserId": "kn72390bk8hntx5wcn3arsfzt981w02t",
        "slug": "weibo",
        "stats": {
            "comments": 0,
            "downloads": 501,
            "installsAllTime": 8,
            "installsCurrent": 8,
            "stars": 1,
            "versions": 2
        },
        "summary": "Use Weibo Open Platform for OAuth2 authentication, timeline retrieval, topic search, and structured social sentiment collection. Trigger this skill when task...",
        "tags": {
            "latest": "k972hr83snnj2qw365cg51f7xn8231e4"
        },
        "updatedAt": 1774327609215
    }
}