41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (STT for Telegram voice messages) is plausible, but the code contains several incoherencies and potential exfiltration signs (hardcoded Telegram target, hardcoded host paths, undec...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772294296306,
        "_id": "k971ncgv6gfe0em40se5ea4p5d821m9x",
        "changelog": "Initial release of Yandex SpeechKit STT skill:\n\n- Enables speech recognition for Telegram voice messages via Yandex SpeechKit API.\n- Supports OggOpus, WAV, and MP3 audio formats.\n- Automatically trims audio to 28 seconds to comply with Yandex limits.\n- Handles IAM token generation and refresh using service account credentials.\n- Usable both from command line and as a Python module.",
        "changelogSource": "user",
        "createdAt": 1772294296306,
        "parsed": {
            "clawdis": {
                "requires": {
                    "bins": [
                        "ffmpeg",
                        "python3"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "strydex",
        "handle": "strydex",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/143320768?v=4",
        "kind": "user",
        "linkedUserId": "kn7fyzwhvea4femw932f8wdnvn80jrg0"
    },
    "ownerHandle": "strydex",
    "skill": {
        "_creationTime": 1772294296306,
        "_id": "kd77zjga2g4ypnj2pd42kqn7gx820z3a",
        "badges": [],
        "createdAt": 1772294296306,
        "displayName": "Yandex Speechkit STT via Telegram Gateway",
        "latestVersionId": "k971ncgv6gfe0em40se5ea4p5d821m9x",
        "ownerUserId": "kn7fyzwhvea4femw932f8wdnvn80jrg0",
        "slug": "yandex-speechkit-stt",
        "stats": {
            "comments": 0,
            "downloads": 261,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 1,
            "versions": 1
        },
        "summary": "Распознавание речи через Yandex SpeechKit API для голосовых сообщений в Telegram. Используй когда пользователь отправляет голосовые сообщения и хочет, чтобы...",
        "tags": {
            "latest": "k971ncgv6gfe0em40se5ea4p5d821m9x"
        },
        "updatedAt": 1774327903509
    }
}