41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly matches its stated purpose (parsing X posts and returning media links), but the download helper contains hard-coded RPC/secret/paths and ignores user-configured environment variables ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772694233384,
        "_id": "k97ccg9zgq7bzbdb518bsf0td582b07j",
        "changelog": "Initial release of x-media-parser.\n\n- Parses X\/Twitter posts to extract direct download links for images and videos.\n- Supports multiple images and videos per post, as well as GIFs.\n- No login or X API key required; uses vxtwitter API.\n- Returns detailed media metadata, including resolution and duration.\n- Provides command-line usage and formatted JSON output.\n- Compatible with Aria2 for direct downloading, with example scripts included.",
        "changelogSource": "auto",
        "createdAt": 1772694233384,
        "parsed": {
            "clawdis": {
                "emoji": "𝕏"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Ingress",
        "handle": "ingress007",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/42857023?v=4",
        "kind": "user",
        "linkedUserId": "kn73fhb0hhd289a8bfzteta02d82bw0k"
    },
    "ownerHandle": "ingress007",
    "skill": {
        "_creationTime": 1772694233384,
        "_id": "kd74rctbx7ttxa77cpdwedgb6x82b0gr",
        "badges": [],
        "createdAt": 1772694233384,
        "displayName": "X Media Parser",
        "latestVersionId": "k97ccg9zgq7bzbdb518bsf0td582b07j",
        "ownerUserId": "kn73fhb0hhd289a8bfzteta02d82bw0k",
        "slug": "x-media-parser",
        "stats": {
            "comments": 0,
            "downloads": 244,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 1,
            "versions": 1
        },
        "summary": "解析 X\/Twitter 帖子，获取图片和视频的下载直链。使用 vxtwitter API，无需登录。",
        "tags": {
            "latest": "k97ccg9zgq7bzbdb518bsf0td582b07j"
        },
        "updatedAt": 1774329410624
    }
}