41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's stated purpose (run a repo release script for a single skill) matches its files, but it executes an arbitrary release.sh from a user-specified repository without declaring required credent...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772549929687,
        "_id": "k97dgbf01ykavvs75btkwy5ywn826c2d",
        "changelog": "Initial release: automates single skill version update and ClaWHub publish",
        "changelogSource": "user",
        "createdAt": 1772549929687,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Wells Wu",
        "handle": "wells1137",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/195866913?v=4",
        "kind": "user",
        "linkedUserId": "kn7bvj2713wy247cfpk7mj9t2x81re7h"
    },
    "ownerHandle": "wells1137",
    "skill": {
        "_creationTime": 1772549929687,
        "_id": "kd76b6d3nsy3v4pw09k9hsnfmx8263jp",
        "badges": [],
        "createdAt": 1772549929687,
        "displayName": "Skill Updater",
        "latestVersionId": "k97dgbf01ykavvs75btkwy5ywn826c2d",
        "ownerUserId": "kn7bvj2713wy247cfpk7mj9t2x81re7h",
        "slug": "wells1137-skill-updater",
        "stats": {
            "comments": 0,
            "downloads": 221,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Updates a specific skill within a repository and triggers the automated publishing pipeline. Use when the user wants to release a new version of a single skill.",
        "tags": {
            "latest": "k97dgbf01ykavvs75btkwy5ywn826c2d"
        },
        "updatedAt": 1774328789843
    }
}