65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's instructions mostly match its stated purpose (wrapping the xapi CLI), but there are inconsistencies around where credentials are stored and the skill's ability to call arbitrary third‑part...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773390926325,
        "_id": "k971wv4f1wx027d313xyf79rjx82vqkn",
        "changelog": "- Updated all CLI usage instructions from npx @xapi-to\/xapi to npx xapi-to for improved simplicity and clarity.\n- Installation and setup commands now use the new xapi-to syntax everywhere.\n- Expanded the API Services section to explicitly list several available third-party APIs.\n- General rewording and improved consistency in reference blocks and example commands.",
        "changelogSource": "user",
        "createdAt": 1773390926325,
        "parsed": {
            "clawdis": {
                "emoji": "x",
                "primaryEnv": "XAPI_API_KEY",
                "requires": {
                    "anyBins": [
                        "npx"
                    ]
                }
            }
        },
        "version": "1.0.2"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "洛冰河",
        "handle": "glacier-luo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/30594509?v=4",
        "kind": "user",
        "linkedUserId": "kn7az8h8a2ehs7c0q8dv2ff9g180m46a"
    },
    "ownerHandle": "glacier-luo",
    "skill": {
        "_creationTime": 1770388095235,
        "_id": "kd74y0xhvwqxz0yysskm33a3rn80n7vm",
        "badges": [],
        "createdAt": 1770388095235,
        "displayName": "xAPI",
        "latestVersionId": "k971wv4f1wx027d313xyf79rjx82vqkn",
        "ownerUserId": "kn7az8h8a2ehs7c0q8dv2ff9g180m46a",
        "slug": "xapi123123",
        "stats": {
            "comments": 0,
            "downloads": 1139,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "Use xapi CLI to access real-time external data — Twitter\/X profiles, tweets, and timelines, crypto token prices and metadata, web search, news, and AI text p...",
        "tags": {
            "latest": "k971wv4f1wx027d313xyf79rjx82vqkn"
        },
        "updatedAt": 1774323029310
    }
}