threatbook-skills

集成微步在线威胁情报API，提供文件上传分析、文件信誉查询、多引擎检测、IP信誉查询和失陷检测能力；当用户需要分析可疑文件、查询文件威胁情报、检测IP安全状态或排查主机失陷风险时使用

This skill appears to do what it claims: it calls ThreatBook APIs and requires a ThreatBook API key. Before installing, consider: 1) Do not upload sensitive or private files — file_upload.py transmits file bytes to an external service. 2) Set THREATBOOK_API_KEY in your environment (most scripts read it), but note ip_reputation.py requires an --api_key CLI argument (SKILL.md examples omitted this) — either pass the key on the command line or edit the script to read the env var. 3) Confirm you obtained the API key from the official ThreatBook site (api.threatbook.cn) and understand rate limits and data retention policies. 4) If you want stricter safety, review/modify the scripts to avoid uploading files you cannot share, and prefer using hashed queries (file_report/file_multiengines) rather than uploading full binaries.

Type: OpenClaw Skill Name: threatbook-skills Version: 1.0.0 The skill bundle is a legitimate integration for the ThreatBook (微步在线) threat intelligence platform. The scripts in the `scripts/` directory (such as `file_upload.py`, `ip_reputation.py`, and `file_report.py`) correctly implement the functionality described in `SKILL.md` by interacting with official ThreatBook API endpoints (api.threatbook.cn). There is no evidence of data exfiltration, malicious execution, or prompt injection; the file upload capability is consistent with the stated purpose of security analysis.