55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to do what it says (export Zeplin screens to a local package), but its runtime instructions and helpers read/write a plain file in the user's home and use a short inline node script ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773490775882,
        "_id": "k9737x2dnpwg2btz24kj4f7gq982w3xe",
        "changelog": "- Improves handling of Zeplin screen links: extracts valid screen URLs and prompts users for correct links if needed.\n- Adds per-project token management, including automated token lookup, masked prompts for missing tokens, and secure storage.\n- Supports exporting multiple Zeplin screens in one command and packages local assets and metadata into a zip file.\n- Replies with clear export status and usage instructions, including a summary of successes and failures.\n- Includes real-time progress updates when exporting multiple screens.",
        "changelogSource": "user",
        "createdAt": 1773490775882,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "sullivangu89",
        "handle": "sullivangu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1876794?v=4",
        "kind": "user",
        "linkedUserId": "kn73bkydeq61sd5whb27yjfkq982xjgk"
    },
    "ownerHandle": "sullivangu",
    "skill": {
        "_creationTime": 1773490775882,
        "_id": "kd79xcgnetyjs8kndsfbdn70qn82wdd6",
        "badges": [],
        "createdAt": 1773490775882,
        "displayName": "Zeplin to Prompt",
        "latestVersionId": "k9737x2dnpwg2btz24kj4f7gq982w3xe",
        "ownerUserId": "kn73bkydeq61sd5whb27yjfkq982xjgk",
        "slug": "zeplin-to-prompt",
        "stats": {
            "comments": 0,
            "downloads": 101,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Export one or more Zeplin screen URLs into a structured layer tree with local assets and package the result as a zip file. Use when a user shares an app.zepl...",
        "tags": {
            "latest": "k9737x2dnpwg2btz24kj4f7gq982w3xe"
        },
        "updatedAt": 1774333634866
    }
}