55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement a Rain Classroom (Yuketang) connector and asks you to provide a YUKETANG_SECRET, but the registry metadata omits that requirement and the included setup scripts use npx ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774614213759,
        "_id": "k97bhcqkf5xdgaaw93csa4ysjh83pnhw",
        "changelog": "**v1.0.11 Changelog**\n\n- Added setup.js script for installation\/setup.\n- Completely rewritten and streamlined configuration instructions in SKILL.md for easier onboarding.\n- Updated tool list in SKILL.md, including new teacher作业\/公告批改\/阅读统计相关工具说明。\n- Improved step-by-step environment variable setup and validation directions.\n- Clarified global tool usage rules and combination scenarios.",
        "changelogSource": "user",
        "createdAt": 1774614213759,
        "version": "1.0.11"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17767g052g4j0pzymh9y4bqcs83hhah",
        "displayName": "luzhe",
        "handle": "tcluzhe",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/6837297?v=4",
        "kind": "user",
        "linkedUserId": "kn71cgbag6j4cgpzh7wmpm6xas8362wf"
    },
    "ownerHandle": "tcluzhe",
    "skill": {
        "_creationTime": 1774412687338,
        "_id": "kd72zccgsh345m1k76g7kcv22d83kcxz",
        "badges": [],
        "createdAt": 1774412687338,
        "displayName": "yuketang-incub",
        "latestVersionId": "k97bhcqkf5xdgaaw93csa4ysjh83pnhw",
        "ownerPublisherId": "s17767g052g4j0pzymh9y4bqcs83hhah",
        "ownerUserId": "kn71cgbag6j4cgpzh7wmpm6xas8362wf",
        "slug": "yuketang-incub",
        "stats": {
            "comments": 0,
            "downloads": 130,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 12
        },
        "summary": "Use this skill when the user asks about Rain Classroom (Yuketang), such as their account ID, courses they teach, or courses they take. Trigger phrases includ...",
        "tags": {
            "latest": "k97bhcqkf5xdgaaw93csa4ysjh83pnhw"
        },
        "updatedAt": 1774615610246
    }
}