1GET /v3/skill/security/results

1GET /v3/skill/security/results?slug=my-skill&version=1.0.2&source=openclaw
2GET /v3/skill/security/results?slug=my-skill
3GET /v3/skill/security/results?sha256=42d41782d4c3c790e22e0eb26a444ea386e234cbdd75b9a57a10a55dab6ca98e

1{
2  "code": "success",
3  "message": "success",
4  "ts": 1786362673044,
5  "data": [
6    {
7      "slug": "nano-banana-pro",
8      "version": "1.0.1",
9      "source": "openclaw",
10      "sha256": "42d41782d4c3c790e22e0eb26a444ea386e234cbdd75b9a57a10a55dab6ca98e",
11      "bd_confidence": "safe",
12      "bd_describe": "该 Skill 由已验证的知名个人发布……综合评估为：安全可信。",
13      "scanned_at": 1783032487000,
14      "detail": {
15        "antivirus": { "total_files": 3, "virus_count": 0, "virus_details": null },
16        "github": { "account_type": "User", "created_at": "2009-02-27T08:34:22Z", "followers": 52664, "name": "steipete" },
17        "openclaw": { "oc_describe": "This skill does what it claims...", "oc_status": "Benign" },
18        "skill_antivirus": { "risk_level": "safe" },
19        "skillscanner": {
20          "findings_count": 0,
21          "llm_overall_assessment": "……未发现供应链攻击、提示注入、数据外传或代码混淆等恶意行为。",
22          "llm_primary_threats": [],
23          "max_severity": "safe",
24          "risk_status": "clean",
25          "severity_counts": { "CRITICAL": 0, "HIGH": 0, "INFO": 0, "LOW": 0, "MEDIUM": 0 }
26        },
27        "virustotal": { "vt_describe": "...", "vt_status": "Suspicious" }
28      },
29      "permission": {
30        "has_scripts": true,
31        "has_binaries": false,
32        "categories_hit": ["data_collection"],
33        "rule_ids_hit": ["COLLECT_READ_ENV_SECRET"],
34        "findings": [
35          {
36            "rule_id": "COLLECT_READ_ENV_SECRET",
37            "category": "data_collection",
38            "title": "读取敏感环境变量",
39            "description": "检测到按名精准读取敏感环境变量（API_KEY / SECRET / TOKEN / WALLET / MNEMONIC 等）",
40            "file_path": "scripts/generate_image.py",
41            "line_number": 26,
42            "snippet": "os.environ.get(\"GEMINI_API_KEY\")",
43            "remediation": "仅读取任务必需的环境变量，避免读取 API_KEY/SECRET/TOKEN 等敏感变量",
44            "capability": "敏感环境变量读取"
45          }
46        ],
47        "scanned_at": 1782785531000
48      },
49      "compliance_risk": {
50        "category_count": 1,
51        "subcategory_count": 1,
52        "hit_types": ["geo"],
53        "sub_hit_types": [304],
54        "categories": [
55          { "hitType": "geo", "subcategories": [ { "subHitType": 304, "fileName": "SKILL.md", "hitWord": "GEMINI_API_KEY" } ] }
56        ],
57        "scanned_at": 1783032487000
58      }
59    }
60  ]
61}

1{ "code": "success", "message": "success", "ts": 1773822833794, "data": [] }

1{
2  "code": "success",
3  "message": "success",
4  "ts": 1786362738492,
5  "data": [
6    {
7      "slug": "freelance-automation-gig",
8      "version": "1.0.0",
9      "source": "openclaw",
10      "sha256": "d1c6eee2dae31c6dbc393768904890354fe84f0f48bf23419678d11c0c80e6c3",
11      "bd_confidence": "dangerous",
12      "bd_describe": "该技能经安全审核发现存在高风险行为，是已知的恶意技能，判定为危险。",
13      "scanned_at": 1784307908000,
14      "detail": {
15        "manual_review": {
16          "reason": "综合判定为「恶意」……",
17          "result": "black",
18          "reviewed_at": "2026-07-18T01:05:08+08:00"
19        }
20      },
21      "permission": { "has_scripts": false, "has_binaries": false, "scanned_at": 1779413335000 },
22      "compliance_risk": {
23        "category_count": 1, "subcategory_count": 1,
24        "hit_types": ["geo"], "sub_hit_types": [303],
25        "categories": [ { "hitType": "geo", "subcategories": [ { "subHitType": 303, "fileName": "SKILL.md", "hitWord": "Discord bot" } ] } ],
26        "scanned_at": 1779860432000
27      },
28      "label": ["T01", "C01"]
29    }
30  ]
31}