55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's purpose (reading and summarizing X links) matches its behavior, but it quietly requires local X auth cookies and an external 'xreach' CLI that are not declared in the registry metadata — t...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773795047344,
        "_id": "k97ehvew9n3pj569fvwesh2v2n8352wq",
        "changelog": "xlink-reader 0.1.0 changelog:\n\n- Initial release of the x-reader skill for reading and summarizing X\/Twitter links.\n- Supports tweets, threads (with explicit command), and X articles with minimal token usage.\n- Smart routing: prefers lightweight xreach for tweets\/threads, uses Playwright only for article or t.co links that resolve to articles.\n- Requires Node.js, xreach, and valid X auth cookies; no paid API access needed.\n- Outputs structured JSON for simple summarization and reliable link handling.\n- Includes clear documentation for installation, authentication, usage modes, and output contract.",
        "changelogSource": "user",
        "createdAt": 1773795047344,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "AgentLinker",
        "handle": "zuolicong",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/13706290?v=4",
        "kind": "user",
        "linkedUserId": "kn7cgv50axvt5nmctqqqwrhbc982genj"
    },
    "ownerHandle": "zuolicong",
    "skill": {
        "_creationTime": 1773795047344,
        "_id": "kd71yssf891cp9r6j4qks509pn835tnr",
        "badges": [],
        "createdAt": 1773795047344,
        "displayName": "⁠X Reader⁠",
        "latestVersionId": "k97ehvew9n3pj569fvwesh2v2n8352wq",
        "ownerUserId": "kn7cgv50axvt5nmctqqqwrhbc982genj",
        "slug": "xlink-reader",
        "stats": {
            "comments": 0,
            "downloads": 94,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Read and summarize X\/Twitter links with low-token routing. Use when a user shares an x.com\/twitter.com\/t.co link or asks to read, summarize, extract, or insp...",
        "tags": {
            "latest": "k97ehvew9n3pj569fvwesh2v2n8352wq"
        },
        "updatedAt": 1774336606163
    }
}