26/100 (High)

OpenClaw： malicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： malicious

The package claims to set up a publishing pipeline for the user's repository but contains multiple hardcoded paths, repo names, and actions that promote the author's repo (wells1137) and will use the ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772542391908,
        "_id": "k97c7yjqtsv19sbacj9yhv23gn827c8q",
        "changelog": "Initial release: automates multi-channel AgentSkill publishing pipeline",
        "changelogSource": "user",
        "createdAt": 1772542391908,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Wells Wu",
        "handle": "wells1137",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/195866913?v=4",
        "kind": "user",
        "linkedUserId": "kn7bvj2713wy247cfpk7mj9t2x81re7h"
    },
    "ownerHandle": "wells1137",
    "skill": {
        "_creationTime": 1772542391908,
        "_id": "kd70ha1p4ffhzh3kzqbcwf47z1827xhc",
        "badges": [],
        "createdAt": 1772542391908,
        "displayName": "Skill Publisher",
        "latestVersionId": "k97c7yjqtsv19sbacj9yhv23gn827c8q",
        "ownerUserId": "kn7bvj2713wy247cfpk7mj9t2x81re7h",
        "slug": "wells1137-skill-publisher",
        "stats": {
            "comments": 0,
            "downloads": 214,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Automates the multi-channel publishing of Agent Skills. Use when the user wants to release a new version of their skills to ClaWHub, GitHub, and other platfo...",
        "tags": {
            "latest": "k97c7yjqtsv19sbacj9yhv23gn827c8q"
        },
        "updatedAt": 1774328753614
    }
}