2026.4.25
@ezr/store-report-assistant
OpenClaw store daily and weekly report assistant plugin
Rank#1514
Security Findings
3pull_request_target with secrets
MaliciousLineage[.github/workflows/auto-response.yml] pull_request_target with secrets
Unpinned dependencies
SuspiciousLineage2 unpinned: @openclaw/ai, @openclaw/session-url-contract
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com
Contents
1 skill bundled by this extension
1 no risk known
ezr-store-report
skill
None known
skills/ezr-store-report130611dcd5a2…
Editions
1- 2026.4.25Scanned Aug 4, 2026, 03:33 PMMedium