47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's declared purpose (a hybrid local-cloud security scanner) matches its requirements, but important runtime behaviors (local redaction, what snippets are uploaded, and exact file-read scope) ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773397606693,
        "_id": "k97bkc9t274z68bsc59fpw7ths82t5gs",
        "changelog": "yidun-skill-sec 1.0.1\n\n- Version bump with no code or SKILL.md file change detected.\n- No new features, fixes, or breaking changes in this release.",
        "changelogSource": "user",
        "createdAt": 1773397606693,
        "parsed": {
            "clawdis": {
                "emoji": "⚡",
                "envVars": [
                    {
                        "description": "Enable or disable cloud threat intelligence. Default: true",
                        "name": "YIDUN_SKILL_SEC_CLOUD",
                        "required": false
                    },
                    {
                        "description": "Comma-separated list of additional trusted registry hostnames",
                        "name": "YIDUN_SKILL_SEC_TRUSTED_REGISTRIES",
                        "required": false
                    },
                    {
                        "description": "Log the redacted payload locally before cloud upload for audit. Default: false",
                        "name": "YIDUN_SKILL_SEC_LOG_PAYLOAD",
                        "required": false
                    }
                ],
                "os": [
                    "linux",
                    "darwin",
                    "win32"
                ],
                "requires": {
                    "bins": [
                        "curl",
                        "jq",
                        "openssl"
                    ]
                }
            }
        },
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Yidun",
        "handle": "yd-dev",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/17902411?v=4",
        "kind": "user",
        "linkedUserId": "kn760v7r4m1kmfh071r0vrerjs82svww"
    },
    "ownerHandle": "yd-dev",
    "skill": {
        "_creationTime": 1773301057584,
        "_id": "kd7c74sgtgyrqa19qrza0zkgk582ryta",
        "badges": [],
        "createdAt": 1773301057584,
        "displayName": "Yidun Skill Sec",
        "latestVersionId": "k97bkc9t274z68bsc59fpw7ths82t5gs",
        "ownerUserId": "kn760v7r4m1kmfh071r0vrerjs82svww",
        "slug": "yidun-skill-sec",
        "stats": {
            "comments": 0,
            "downloads": 310,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 7,
            "versions": 9
        },
        "summary": "Intelligent code security scanner with hybrid local-cloud detection. Fingerprints packages, runs static behavioral analysis, and consults cloud threat intell...",
        "tags": {
            "latest": "k97bkc9t274z68bsc59fpw7ths82t5gs"
        },
        "updatedAt": 1774332376967
    }
}