Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

openclaw-eho

Provides core analysis of apartment real estate transactions by region, type, and period using data from the 모든집 site within OpenClaw.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 24 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The README/SKILL.md claim the package sources data from the Ministry of Land, Infrastructure and Transport (MOLIT) API, but the code calls https://www.everyhouse-real-payment.com/api/insight/openclaw. That mismatch (claiming a government API while actually proxying to a third‑party site) is an incoherence the user should understand.
Instruction Scope
Runtime instructions and the code stay within the expected scope (accept region/type/period parameters and fetch analysis). They do not read local files or request extra environment variables. However, the SKILL.md is ambiguous about the actual runtime endpoint and what data is transmitted; the skill will send the user's query parameters (sido, gu, dong, apt, typeDetail, start, end) to the external site.
Install Mechanism
There is no install spec in the package metadata (installation is expected via OpenClaw/npm). No suspicious installer URLs are present in the package itself. The runtime behavior performs an outbound fetch to a third‑party domain, which is an important runtime network dependency to verify.
Credentials
The skill requests no environment variables or credentials — its permissions are minimal. That is proportionate for a read-only query tool.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. It does not modify other skills or system-wide settings.
What to consider before installing
This plugin will forward the query parameters you provide (city/province, district, dong, apartment name, transaction type, and start/end) to https://www.everyhouse-real-payment.com. Although the README asserts data is from the MOLIT API, the code calls a third‑party aggregator — verify that external domain and its privacy/security practices before installing. If you need authoritative government data, prefer calling the official MOLIT endpoints directly. Other checks you can do: 1) inspect the published npm package page and its publisher identity, 2) confirm the domain is legitimate and uses HTTPS/TLS correctly, and 3) run the plugin in an environment where outbound network access is controlled if you want to limit possible data leakage.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.1.13
Download zip
latestvk976z90xvs22hdtc7r41x1853d839wpj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

모든집-아파트실거래가를 한눈에! 사이트에 있는 기능을 일부 오픈클로에서 쓸수 있는 플러그인입니다 이플러그인은 단순히 그냥 실거래 정보를 제공한는게 아닌 대한민국 서울/경기등 다양한 지역과 아파트의 실거래 데이터를 국토교통부 api에서 가져와 다양항 테마로(층별,면적별,최고가,평균값등) 분석을 제공하는 패키지입니다

자세한 사항은 npm 사이트를 확인하세요 https://www.npmjs.com/package/@brokimyeah/openclaw-eho

This package does not simply provide raw real estate transaction data. It delivers analyzed insights based on apartment transaction data across various regions in South Korea, including Seoul and Gyeonggi, sourced from the Ministry of Land, Infrastructure and Transport (MOLIT) API. The data is processed and presented through multiple perspectives such as floor level, unit size, highest price, average value, and more.

download files and

openclaw plugins install "folderlocation" or download openclaw plugins install @brokimyeah/openclaw-eho

check c\user.openclaw\extensions\openclaw-eho If the folder exists, the plugin is installed successfully.

and just ask

require sido value and period and typeDetail ex)서울시(sido) 매매(typeDetail) 최근3개월(period)조회해줘

If OpenClaw cannot find the eho plugin, please try saying: "Please use the installed plugin 'eho'."

While it does not include all features of the original website, it provides core functionality for analyzing real estate transactions by region and apartment.

check more here https://www.npmjs.com/package/@brokimyeah/openclaw-eho

Files

5 total
Select a file
Select a file to preview.

Comments

Loading comments…