37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement a real devops toolbox, but the declared requirements and runtime instructions don't fully match the operations it will perform (notably missing credential declarations a...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774828702432,
        "_id": "k975tfhkrp331qkarv1rq1m6n583vktj",
        "changelog": "# Release Notes: wip-ai-devops-toolbox v1.9.65\n\n**Fix release notes scaffold on protected branches**\n\nWhen `wip-release patch` runs on main without a RELEASE-NOTES file, it used to scaffold a\ntemplate directly in the working tree. On repos with branch guards (pre-commit hooks that\nblock commits to main), this scaffolded file could not be removed or committed. It would\nblock `git pull` and leave the working tree dirty. This has happened multiple times across\ndifferent repos.\n\nThe fix adds a branch check before scaffolding. If the current branch is main or master,\nwip-release now prints a clear error telling the user to write release notes on their\nfeature branch before merging, then exits non-zero without creating any files. The scaffold\nbehavior still works on feature branches, where it's actually useful.\n\n## Issues closed\n\n- Closes #223\n\n## How to verify\n\n```bash\n# On main, without release notes: should error, NOT scaffold\ncd any-repo && git checkout main\nwip-release patch\n# Expected: \"Release notes missing. Write RELEASE-NOTES-v*.md on your feature branch before merging.\"\n# Expected: no RELEASE-NOTES file created in working tree\n\n# On a feature branch: should scaffold as before\ngit checkout -b test\/scaffold-check\nwip-release patch\n# Expected: scaffolded template created\n```",
        "changelogSource": "user",
        "createdAt": 1774828702432,
        "parsed": {
            "clawdis": {
                "emoji": "🧰",
                "install": [
                    {
                        "bins": [
                            "wip-release",
                            "wip-install",
                            "wip-repos",
                            "wip-license-hook",
                            "wip-license-guard",
                            "wip-file-guard",
                            "wip-repo-init",
                            "wip-readme-format"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install all tools via npm",
                        "package": "@wipcomputer\/wip-ai-devops-toolbox"
                    }
                ],
                "requires": {
                    "bins": [
                        "git",
                        "npm",
                        "gh",
                        "node"
                    ]
                }
            }
        },
        "version": "1.9.65"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17620xzyc7kfan8m36at57m6n83h8he",
        "displayName": "Parker Todd Brooks",
        "handle": "parkertoddbrooks",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/585456?v=4",
        "kind": "user",
        "linkedUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h"
    },
    "ownerHandle": "parkertoddbrooks",
    "skill": {
        "_creationTime": 1773281829891,
        "_id": "kd76ykjawade6thkaptr3ckkqs82snqh",
        "badges": [],
        "createdAt": 1773281829891,
        "displayName": "Wip Ai Devops Toolbox Private",
        "latestVersionId": "k975tfhkrp331qkarv1rq1m6n583vktj",
        "ownerPublisherId": "s17620xzyc7kfan8m36at57m6n83h8he",
        "ownerUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h",
        "slug": "wip-ai-devops-toolbox",
        "stats": {
            "comments": 0,
            "downloads": 576,
            "installsAllTime": 1,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 63
        },
        "summary": "Complete DevOps toolkit for AI-assisted software development. Release pipeline, license compliance, copyright enforcement, repo visibility guard, identity fi...",
        "tags": {
            "latest": "k975tfhkrp331qkarv1rq1m6n583vktj"
        },
        "updatedAt": 1774831909526
    }
}