55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's code and docs largely match its Yunxiao integration purpose, but there are inconsistencies (missing declared env requirement) and runtime behaviors (dynamic npx install + child process inh...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774337924326,
        "_id": "k97642trz9v3sddyr7pfdxwr4183h9pg",
        "changelog": "Initial public release of yunxiao-mcp skill.\n\n- Provides command-line utilities for querying and updating Yunxiao (云效) work items, comments, projects, and organization members.\n- Supports commands for listing organizations, searching projects\/work items, fetching item details, managing comments, and retrieving organization members.\n- Includes user scenarios, environment variable setup, and error handling instructions.\n- All private IDs, project mappings, and internal conventions are excluded from public documentation and should be kept locally.",
        "changelogSource": "user",
        "createdAt": 1774337924326,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17c7tms012203069qx3yzzn7h83h42k",
        "displayName": "文宁",
        "handle": "n-wen",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/10182240?v=4",
        "kind": "user",
        "linkedUserId": "kn7feftgkqsmeajywc54e80mtx82k22v"
    },
    "ownerHandle": "n-wen",
    "skill": {
        "_creationTime": 1774337924326,
        "_id": "kd7cherkdbmy8d3n7w8ysx2pn583g5nr",
        "badges": [],
        "createdAt": 1774337924326,
        "displayName": "阿里云云效mcp对接",
        "latestVersionId": "k97642trz9v3sddyr7pfdxwr4183h9pg",
        "ownerPublisherId": "s17c7tms012203069qx3yzzn7h83h42k",
        "ownerUserId": "kn7feftgkqsmeajywc54e80mtx82k22v",
        "slug": "yunxiao-mcp",
        "stats": {
            "comments": 0,
            "downloads": 12,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Use when needing to query or update Yunxiao work items, comments, projects, or organization members from OpenClaw.",
        "tags": {
            "latest": "k97642trz9v3sddyr7pfdxwr4183h9pg"
        },
        "updatedAt": 1774338111651
    }
}