65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

总体上这个技能能做它宣称的事（把 Markdown 变成小红书风格的 HTML 卡片并导出 PNG），但代码中包含未在注册元数据中声明的可选 LLM 集成（需要 API 密钥）、自动加载 .env 文件、以及嵌入的第三方 CDN，引发信息泄露/元数据不一致的风险——在安装前请检查 .env 内容并谨慎使用 --llm 功能。

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773411898910,
        "_id": "k972a2pjgcbqvqyrdztv3c2cjx82vq2f",
        "changelog": "Add LLM mode for intelligent card generation, unify prompt system, fix card spacing to 10px, improve .env loading",
        "changelogSource": "user",
        "createdAt": 1773411898910,
        "version": "1.4.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "River Yan",
        "handle": "riverfor",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/3059527?v=4",
        "kind": "user",
        "linkedUserId": "kn78906rd3gn1m7a3t5s7ck1w980q9q4"
    },
    "ownerHandle": "riverfor",
    "skill": {
        "_creationTime": 1773371862776,
        "_id": "kd7f4v6vdkd0h15ma20rydkaad82ty77",
        "badges": [],
        "createdAt": 1773371862776,
        "displayName": "Xiaohongshu Card Creator",
        "latestVersionId": "k972a2pjgcbqvqyrdztv3c2cjx82vq2f",
        "ownerUserId": "kn78906rd3gn1m7a3t5s7ck1w980q9q4",
        "slug": "xiaohongshu-card-creator",
        "stats": {
            "comments": 0,
            "downloads": 163,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "将小红书文案转换为HTML图文卡片网页，支持智能内容识别和通用模板两种模式，生成标准3:4竖版卡片，支持一键下载所有卡片图为PNG",
        "tags": {
            "latest": "k972a2pjgcbqvqyrdztv3c2cjx82vq2f"
        },
        "updatedAt": 1774332816088
    }
}