47/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： clean

OpenClaw： suspicious

The skill's purpose and runtime behavior mostly line up (it calls an npm client to extract subtitles) but its instructions ask users to share API keys in-chat and rely on npx to fetch and run the late...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774189406231,
        "_id": "k972x4kqr76pyf45v3d39a9gkh83dfpa",
        "changelog": "- Added strict guidance to always include the purchase\/learn link (https:\/\/devtool.uk\/plugin) when `ZMJ_API_KEY` is missing.\n- Standardized error messaging for missing API Key, requiring a template message with link and setup instructions.\n- Clarified that only stating \"set the environment variable\" is insufficient—must also provide the purchase link.\n- Added a ready-to-use Markdown template for API Key missing scenario.\n- No code changes detected; documentation and messaging requirements updated.",
        "changelogSource": "user",
        "createdAt": 1774189406231,
        "parsed": {
            "clawdis": {
                "emoji": "🎞️",
                "requires": {
                    "bins": [
                        "node",
                        "npx"
                    ]
                }
            }
        },
        "version": "1.0.17"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "kyriswu",
        "handle": "kyriswu",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5120703?v=4",
        "kind": "user",
        "linkedUserId": "kn7f82k3gnhe2et6rj37b1rsfn81qq01"
    },
    "ownerHandle": "kyriswu",
    "skill": {
        "_creationTime": 1773467976555,
        "_id": "kd7eak91whac5p91455t9s0pwx82x7ve",
        "badges": [],
        "createdAt": 1773467976555,
        "displayName": "字幕菌",
        "latestVersionId": "k972x4kqr76pyf45v3d39a9gkh83dfpa",
        "ownerUserId": "kn7f82k3gnhe2et6rj37b1rsfn81qq01",
        "slug": "zimujun",
        "stats": {
            "comments": 0,
            "downloads": 249,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 18
        },
        "summary": "字幕菌（zimujun）：从主流视频平台链接提取视频文案\/字幕文本。适用于 YouTube、TikTok\/抖音、小红书、Bilibili 等平台。",
        "tags": {
            "latest": "k972x4kqr76pyf45v3d39a9gkh83dfpa"
        },
        "updatedAt": 1774333487699
    }
}