37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement a full-system memory capture service that is coherent with its stated purpose, but there are multiple inconsistencies and intrusive behaviors (undeclared required vars, ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration (+1 more)

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774025634549,
        "_id": "k979jd3rqwqy47jhva3xjt5y15838pap",
        "changelog": "# Release Notes: memory-crystal v0.7.29\n\n**Doc audit: MLX setup, deep search params, log paths, role clarification.**\n\n## What changed\n\nSKILL.md and TECHNICAL.md updated for 2 weeks of undocumented features:\n\n- **MLX local LLM:** Added as Option A in SKILL.md Step 2. CLI commands (setup, status, stop) added to TECHNICAL.md.\n- **Deep search parameters:** `--intent`, `--explain`, `--candidates` documented in both SKILL.md (crystal_search tool) and TECHNICAL.md (CLI reference + new sections for intent, explain, candidate limit, LLM cache).\n- **Log paths:** Fixed obsolete `\/tmp\/ldm-dev-tools\/` reference to `~\/.ldm\/logs\/`. Added logs\/ to directory structure.\n- **Role clarification:** Two-role architecture (Core and Node) explicitly stated. Standalone role was removed in v0.7.22.\n\n## Why\n\n29 releases in 13 days. Docs didn't keep pace. Agents using crystal_search didn't know about --intent (query disambiguation) or --explain (scoring transparency).\n\n## Issues closed\n\n- #57\n\n## How to verify\n\n```bash\ngrep \"intent\" SKILL.md TECHNICAL.md\ngrep \"mlx\" SKILL.md TECHNICAL.md\ngrep \"ldm\/logs\" TECHNICAL.md\n```",
        "changelogSource": "user",
        "createdAt": 1774025634549,
        "version": "0.7.29"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Parker Todd Brooks",
        "handle": "parkertoddbrooks",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/585456?v=4",
        "kind": "user",
        "linkedUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h"
    },
    "ownerHandle": "parkertoddbrooks",
    "skill": {
        "_creationTime": 1773780642826,
        "_id": "kd7erz4cz2bve15jn04s68c469832xe0",
        "badges": [],
        "createdAt": 1773780642826,
        "displayName": "Memory Crystal Private",
        "latestVersionId": "k979jd3rqwqy47jhva3xjt5y15838pap",
        "ownerUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h",
        "slug": "wip-memory-crystal",
        "stats": {
            "comments": 0,
            "downloads": 85,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Search and manage the shared memory crystal. Use when user says \"do you remember\", \"search memory\", \"remember this\", \"forget that\", \"memory status\", \"what do...",
        "tags": {
            "latest": "k979jd3rqwqy47jhva3xjt5y15838pap"
        },
        "updatedAt": 1774336487688
    }
}