90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill's code, install, and runtime instructions are coherent with its stated purpose (a GitHub-CLI-based guard that blocks making repos public unless a -private counterpart exists).

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774828676981,
        "_id": "k977fqpf6d48mrwfxp2wqg820n83v58p",
        "changelog": "# Release Notes: wip-ai-devops-toolbox v1.9.65\n\n**Fix release notes scaffold on protected branches**\n\nWhen `wip-release patch` runs on main without a RELEASE-NOTES file, it used to scaffold a\ntemplate directly in the working tree. On repos with branch guards (pre-commit hooks that\nblock commits to main), this scaffolded file could not be removed or committed. It would\nblock `git pull` and leave the working tree dirty. This has happened multiple times across\ndifferent repos.\n\nThe fix adds a branch check before scaffolding. If the current branch is main or master,\nwip-release now prints a clear error telling the user to write release notes on their\nfeature branch before merging, then exits non-zero without creating any files. The scaffold\nbehavior still works on feature branches, where it's actually useful.\n\n## Issues closed\n\n- Closes #223\n\n## How to verify\n\n```bash\n# On main, without release notes: should error, NOT scaffold\ncd any-repo && git checkout main\nwip-release patch\n# Expected: \"Release notes missing. Write RELEASE-NOTES-v*.md on your feature branch before merging.\"\n# Expected: no RELEASE-NOTES file created in working tree\n\n# On a feature branch: should scaffold as before\ngit checkout -b test\/scaffold-check\nwip-release patch\n# Expected: scaffolded template created\n```",
        "changelogSource": "user",
        "createdAt": 1774828676981,
        "parsed": {
            "clawdis": {
                "emoji": "🔒",
                "install": [
                    {
                        "bins": [
                            "wip-repo-permissions"
                        ],
                        "id": "node",
                        "kind": "node",
                        "label": "Install via npm",
                        "package": "@wipcomputer\/wip-repo-permissions-hook"
                    }
                ],
                "requires": {
                    "bins": [
                        "node",
                        "gh"
                    ]
                }
            }
        },
        "version": "1.9.65"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17620xzyc7kfan8m36at57m6n83h8he",
        "displayName": "Parker Todd Brooks",
        "handle": "parkertoddbrooks",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/585456?v=4",
        "kind": "user",
        "linkedUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h"
    },
    "ownerHandle": "parkertoddbrooks",
    "skill": {
        "_creationTime": 1773289495872,
        "_id": "kd748bbk0tq98p01b765zaw1m182reh9",
        "badges": [],
        "createdAt": 1773289495872,
        "displayName": "Wip Repo Permissions Hook",
        "latestVersionId": "k977fqpf6d48mrwfxp2wqg820n83v58p",
        "ownerPublisherId": "s17620xzyc7kfan8m36at57m6n83h8he",
        "ownerUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h",
        "slug": "wip-repo-permissions-hook",
        "stats": {
            "comments": 0,
            "downloads": 496,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 61
        },
        "summary": "Repo visibility guard. Blocks repos from going public without a -private counterpart.",
        "tags": {
            "latest": "k977fqpf6d48mrwfxp2wqg820n83v58p"
        },
        "updatedAt": 1774832507707
    }
}