ai-topic-scout

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的总体功能与“热点选题追踪”大体一致,但其实际执行面偏广:要求手动提取 Twitter 会话 Cookie、将凭据传给第三方 CLI、再通过 clawhub 安装其他技能,并处理大量外部内容后自动写入钉钉。未见明确恶意窃密或无关数据外传,因此更像高风险可疑技能而非确认恶意。

Confidence: 83%Severity: 76%
Audit Metadata
Analyzed At
Mar 18, 2026, 09:45 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Fai-topic-scout%2F@43c23455b69605a77d859a467c687f40dc126131