90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill's code, requirements, and instructions are internally consistent with a Twitter (X) posting utility and the requested credentials match its purpose; no evidence of hidden exfiltration or unr...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774125464960,
        "_id": "k9740ezqqzftybq3jzdbp6m47h83agwq",
        "changelog": "Initial release with new streamlined Node.js-based Twitter (X) API posting tool.\n\n- Fully rewritten: Now uses a single script (x-api.js) for all X (Twitter) actions via API v2 and OAuth 1.0a.\n- Supports tweeting, threads, replies, quote-tweets, liking, deleting, timeline fetch, and scheduling.\n- Requires only environment variables for authentication—no dependencies or external Python scripts.\n- All previous scripts and documentation for alternative tools have been removed.\n- Output is clear JSON for easy integration and error checking.",
        "changelogSource": "user",
        "createdAt": 1774125464960,
        "parsed": {
            "clawdis": {
                "author": "ModelFitAI ",
                "requires": {
                    "env": [
                        "X_API_KEY",
                        "X_API_SECRET",
                        "X_ACCESS_TOKEN",
                        "X_ACCESS_SECRET"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "pbopps",
        "handle": "3rdbrain",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/130667201?v=4",
        "kind": "user",
        "linkedUserId": "kn7etaz2wmz7rnm3bh6gt3kjfd81cx1v"
    },
    "ownerHandle": "3rdbrain",
    "skill": {
        "_creationTime": 1774125464960,
        "_id": "kd72a763hprx4000st2xwrsd1983ak8a",
        "badges": [],
        "createdAt": 1774125464960,
        "displayName": "X Publisher",
        "latestVersionId": "k9740ezqqzftybq3jzdbp6m47h83agwq",
        "ownerUserId": "kn7etaz2wmz7rnm3bh6gt3kjfd81cx1v",
        "slug": "x-leads-api",
        "stats": {
            "comments": 0,
            "downloads": 44,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Post tweets, threads, replies, and quote-tweets to X (Twitter) via API v2 with OAuth 1.0a.",
        "tags": {
            "latest": "k9740ezqqzftybq3jzdbp6m47h83agwq"
        },
        "updatedAt": 1774126006976
    }
}