41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill does implement Feishu card sending as described, but it reads a local OpenClaw config file for an app secret (and the README even shows cat'ing that file) while declaring no required credent...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772624007477,
        "_id": "k978e8yyqef0v7bh3sa2tgwhy5829f58",
        "changelog": "- Initial release of the 飞书互动卡片发送技能 (Feishu interactive card sending skill), supporting the international version of Feishu.\n- Enables sending rich-format interactive card messages using schema 2.0, compatible with both Chinese and English Feishu interfaces.\n- Requires double JSON.stringify of the card content to ensure rendering on international Feishu.\n- Provides documentation, card structure examples, supported tags, color themes, and troubleshooting guidance.\n- Supports sending methods via Python script, direct message tool call, or manual curl command.",
        "changelogSource": "auto",
        "createdAt": 1772624007477,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "dadaniya99",
        "handle": "dadaniya99",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/254098635?v=4",
        "kind": "user",
        "linkedUserId": "kn7a841362aj7bgq4pvncj9szx80z084"
    },
    "ownerHandle": "dadaniya99",
    "skill": {
        "_creationTime": 1772624007477,
        "_id": "kd75vww4f9fz5r2bhx50rrz2r58284gc",
        "badges": [],
        "createdAt": 1772624007477,
        "displayName": "Feishu Card",
        "latestVersionId": "k978e8yyqef0v7bh3sa2tgwhy5829f58",
        "ownerUserId": "kn7a841362aj7bgq4pvncj9szx80z084",
        "slug": "xiaolongxia-feishu-card",
        "stats": {
            "comments": 0,
            "downloads": 243,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "飞书互动卡片发送技能（国际版 Feishu 兼容）。当需要发送格式丰富的飞书卡片消息时使用。支持标题、Markdown 内容、颜色主题。关键：必须使用 schema 2.0 格式 + 双重 JSON stringify，否则国际版飞书（Feishu）无法渲染。",
        "tags": {
            "latest": "k978e8yyqef0v7bh3sa2tgwhy5829f58"
        },
        "updatedAt": 1774329116973
    }
}