37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and dependencies generally match a Yahoo Finance integration, but there are documentation inconsistencies (mentions of a local DB that the code doesn't use) and a prompt-injection sig...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773293416127,
        "_id": "k975ref1g6vcj50mq3hvvfzyh182s7rn",
        "changelog": "v0.1.7 of yahooclaw\n\n- No code or documentation changes in this version.\n- Version number updated for release consistency.",
        "changelogSource": "auto",
        "createdAt": 1773293416127,
        "version": "0.1.7"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "ClawMem.com",
        "handle": "leohuang8688",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/262811572?v=4",
        "kind": "user",
        "linkedUserId": "kn755h4bbsesx75c7p0c8ssnd582pbjv"
    },
    "ownerHandle": "leohuang8688",
    "skill": {
        "_creationTime": 1773214384030,
        "_id": "kd7c7erwbxq4kjz67t0wdf6xf582pq2m",
        "badges": [],
        "createdAt": 1773214384030,
        "displayName": "Yahoo Claw",
        "latestVersionId": "k975ref1g6vcj50mq3hvvfzyh182s7rn",
        "ownerUserId": "kn755h4bbsesx75c7p0c8ssnd582pbjv",
        "slug": "yahooclaw",
        "stats": {
            "comments": 0,
            "downloads": 168,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 1,
            "versions": 7
        },
        "summary": "Yahoo Finance API integration for OpenClaw. Use when users ask for stock prices, company financials, historical data, dividends, or market data. Supports rea...",
        "tags": {
            "latest": "k975ref1g6vcj50mq3hvvfzyh182s7rn"
        },
        "updatedAt": 1774331785847
    }
}