{"id":"cmuni31vloh1bad079noxut8c","owner":"Pangolin-spg","name":"openclaw-skills","url":"https://github.com/Pangolin-spg/openclaw-skills","lastScannedAt":"2026-10-07T05:33:57.355Z","freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:31:39.506Z","lastVerifiedAt":"2026-10-22T02:31:39.506Z","lastChangeDetectedAt":null,"scannedHash":null,"latestUpstreamHash":"ddcbca2c72b6efc7827160a781e997eec052b8b1","nextCheckDueAt":"2026-10-23T04:50:13.758Z"},"skills":[{"id":"cmuxoa3c130kyad07nqu9s20q","slug":"pangolinfo-ai-serp","publicId":"8512d1e3-2f06-4780-85dc-f660ae161310","name":"pangolinfo-ai-serp","description":">","author":"","version":"","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-09-30T02:43:05.742Z","sourceUrl":"https://github.com/Pangolin-spg/openclaw-skills/tree/main/pangolinfo-ai-serp","findings":[{"id":"cmuxoa3c230kzad07cxd5iebl","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxoa3c230l0ad076elo17qa","source":"cisco","category":"security","label":"Undeclared network usage","detail":"SKILL.md — Skill code uses network libraries but doesn't declare network requirement","severity":"medium","ruleId":"TOOL_ABUSE_UNDECLARED_NETWORK"},{"id":"cmuxoa3c230l1ad078mzq1m65","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:62 — Pattern detected: urllib.request.Request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxoa3c230l2ad07hpu99pm1","source":"cisco","category":"security","label":"Sensitive source reaches a network sink","detail":"scripts/pangolinfo.py:69 — Correlated sensitive_environment → network behavior across scripts/pangolinfo.py.","severity":"high","ruleId":"CORRELATED_SENSITIVE_NETWORK_FLOW"},{"id":"cmuxoa3c230l3ad07kwi8uq3i","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:69 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxoa3c230l4ad077uyys5b8","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:161 — Pattern detected: urllib.request.Request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxoa3c230l5ad07om1ozf7n","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:162 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T11:32:48.230Z","lastVerifiedAt":"2026-10-22T11:32:48.230Z","lastChangeDetectedAt":null,"scannedHash":"6691f4b851f8ac1a83cd47ee9fc2093c857b3161","latestUpstreamHash":"6691f4b851f8ac1a83cd47ee9fc2093c857b3161","nextCheckDueAt":"2026-10-23T13:17:29.444Z"}},{"id":"cmuxm501127h7ad07w4eqxo9g","slug":"pangolinfo-amazon-scraper","publicId":"de90ef70-e5d1-4f0b-b5f8-85613be034fe","name":"pangolinfo-amazon-scraper","description":">","author":"","version":"","license":"MIT","overallGrade":"C","badgeStatus":"conditional","publishedAt":"2026-09-30T02:43:05.690Z","sourceUrl":"https://github.com/Pangolin-spg/openclaw-skills/tree/main/pangolinfo-amazon-scraper","findings":[{"id":"cmuxm501127h8ad07mhl9841q","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmuxm501127h9ad07hz1qme5h","source":"cisco","category":"security","label":"Undeclared network usage","detail":"SKILL.md — Skill code uses network libraries but doesn't declare network requirement","severity":"medium","ruleId":"TOOL_ABUSE_UNDECLARED_NETWORK"},{"id":"cmuxm501127haad0716t8dpa3","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:60 — Pattern detected: urllib.request.Request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm501127hbad07flglxarj","source":"cisco","category":"security","label":"Sensitive source reaches a network sink","detail":"scripts/pangolinfo.py:67 — Correlated sensitive_environment → network behavior across scripts/pangolinfo.py.","severity":"high","ruleId":"CORRELATED_SENSITIVE_NETWORK_FLOW"},{"id":"cmuxm501127hcad075ge9pb8w","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:67 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm501127hdad07sn7x82rd","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:160 — Pattern detected: urllib.request.Request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"},{"id":"cmuxm501127head07c7e1woji","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/pangolinfo.py:161 — Pattern detected: urllib.request.urlopen(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"B","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"C","criticalCount":0,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:30:06.869Z","lastVerifiedAt":"2026-10-21T23:30:06.869Z","lastChangeDetectedAt":"2026-10-07T04:34:10.058Z","scannedHash":"c07f46fa98be613555af1e5102beb8fb4d9e591e","latestUpstreamHash":"c07f46fa98be613555af1e5102beb8fb4d9e591e","nextCheckDueAt":"2026-10-22T23:28:12.566Z"}}],"publisherSupplied":["skills[].name","skills[].description","skills[].author","skills[].version","skills[].license"]}