65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill's code and docs match its stated purpose (calling a JustAI OpenAPI async chat), but the package metadata omits required environment variables and the skill will send conversation text and an...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774332196295,
        "_id": "k977znyh71cqwvk4tvf8fnxxw583ga65",
        "changelog": "- Initial release of xiaojia-skills for structured marketing and content automation via JustAI openapi async chat endpoints.\n- Provides Python scripts to list projects, list skills, submit chat tasks, and poll results with clear CLI workflows.\n- Supports asynchronous, two-step chat operations (submit and poll) for tasks like marketing plan generation, Xiaohongshu notes, image generation, collect-info and confirm-info flows.\n- Standardizes use of environment variables and enforces use of project_id and skill_id arrays for scoping requests.\n- Introduces guardrails: conversation_id management, natural-language continuation for card confirmation, and error surfacing on failed tasks.\n- Includes detailed usage examples for running all supported operations from the shell.",
        "changelogSource": "user",
        "createdAt": 1774332196295,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s172k9bkxx06dvt257vdvkrbgh83hzxv",
        "displayName": "tanchaowen84",
        "handle": "tanchaowen84",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/203400773?v=4",
        "kind": "user",
        "linkedUserId": "kn7f52av4d67rq3yf45b650zs182ab27"
    },
    "ownerHandle": "tanchaowen84",
    "skill": {
        "_creationTime": 1774332196295,
        "_id": "kd7f9p95mj50kk28bpayrcym3183haxj",
        "badges": [],
        "createdAt": 1774332196295,
        "displayName": "xiaojia-skills",
        "latestVersionId": "k977znyh71cqwvk4tvf8fnxxw583ga65",
        "ownerPublisherId": "s172k9bkxx06dvt257vdvkrbgh83hzxv",
        "ownerUserId": "kn7f52av4d67rq3yf45b650zs182ab27",
        "slug": "xiaojia-skills",
        "stats": {
            "comments": 0,
            "downloads": 11,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Call the JustAI openapi async chat endpoints and return structured JSON results. Use when Codex needs to invoke the deployed JustAI agent for marketing plans...",
        "tags": {
            "latest": "k977znyh71cqwvk4tvf8fnxxw583ga65"
        },
        "updatedAt": 1774333310843
    }
}