55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's claimed purpose (reformat README) matches most of its code and requirements, but there are coherence issues and assumptions (monorepo layout, missing helper module) that make its behavior ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774828664525,
        "_id": "k97dwr0rw1tczpgvzdahck0p3583vh59",
        "changelog": "# Release Notes: wip-ai-devops-toolbox v1.9.65\n\n**Fix release notes scaffold on protected branches**\n\nWhen `wip-release patch` runs on main without a RELEASE-NOTES file, it used to scaffold a\ntemplate directly in the working tree. On repos with branch guards (pre-commit hooks that\nblock commits to main), this scaffolded file could not be removed or committed. It would\nblock `git pull` and leave the working tree dirty. This has happened multiple times across\ndifferent repos.\n\nThe fix adds a branch check before scaffolding. If the current branch is main or master,\nwip-release now prints a clear error telling the user to write release notes on their\nfeature branch before merging, then exits non-zero without creating any files. The scaffold\nbehavior still works on feature branches, where it's actually useful.\n\n## Issues closed\n\n- Closes #223\n\n## How to verify\n\n```bash\n# On main, without release notes: should error, NOT scaffold\ncd any-repo && git checkout main\nwip-release patch\n# Expected: \"Release notes missing. Write RELEASE-NOTES-v*.md on your feature branch before merging.\"\n# Expected: no RELEASE-NOTES file created in working tree\n\n# On a feature branch: should scaffold as before\ngit checkout -b test\/scaffold-check\nwip-release patch\n# Expected: scaffolded template created\n```",
        "changelogSource": "user",
        "createdAt": 1774828664525,
        "parsed": {
            "clawdis": {
                "emoji": "📝",
                "install": [
                    {
                        "bins": [
                            "wip-readme-format"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install via npm",
                        "package": "@wipcomputer\/wip-readme-format"
                    }
                ],
                "requires": {
                    "bins": [
                        "node"
                    ]
                }
            }
        },
        "version": "1.9.65"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17620xzyc7kfan8m36at57m6n83h8he",
        "displayName": "Parker Todd Brooks",
        "handle": "parkertoddbrooks",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/585456?v=4",
        "kind": "user",
        "linkedUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h"
    },
    "ownerHandle": "parkertoddbrooks",
    "skill": {
        "_creationTime": 1773281853336,
        "_id": "kd74wcvf9bdj48bdg6axqn8jzx82r08n",
        "badges": [],
        "createdAt": 1773281853336,
        "displayName": "Wip Readme Format",
        "latestVersionId": "k97dwr0rw1tczpgvzdahck0p3583vh59",
        "ownerPublisherId": "s17620xzyc7kfan8m36at57m6n83h8he",
        "ownerUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h",
        "slug": "wip-readme-format",
        "stats": {
            "comments": 0,
            "downloads": 508,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 62
        },
        "summary": "Reformat any repo's README to follow the WIP Computer standard.",
        "tags": {
            "latest": "k97dwr0rw1tczpgvzdahck0p3583vh59"
        },
        "updatedAt": 1774832808914
    }
}