Skill Auditor (于松涛版)

# skill-auditor - 技能安全审计工具

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "Skill Auditor (于松涛版)" with this command: npx skills add yustnust/yusongtao-skill-auditor

skill-auditor - 技能安全审计工具

描述

对OpenClaw技能进行安全审计,检查潜在的安全风险和恶意代码。

安全检查项

1. 文件操作检查

  • 检查是否包含危险的文件操作(如删除系统文件、修改系统配置)
  • 检查文件路径处理是否存在路径遍历问题
  • 检查是否过度依赖外部文件路径

2. 网络操作检查

  • 检查网络请求是否指向可疑域名
  • 检查是否包含未经用户确认的外部数据传输
  • 检查是否使用安全的HTTPS协议

3. 命令执行检查

  • 检查是否包含exec、process等命令执行工具的使用
  • 检查命令参数是否存在注入风险
  • 检查是否执行危险系统命令

4. 权限检查

  • 检查是否请求过高权限
  • 检查是否访问敏感数据区域

5. 数据泄露检查

  • 检查是否包含发送个人信息的代码
  • 检查是否访问敏感凭证信息

使用方法

  1. 提供要审计的技能路径
  2. 执行安全扫描
  3. 生成安全报告
  4. 根据风险等级决定是否安装

安全等级定义

  • 安全:无风险
  • 低风险:轻微风险,可控
  • 中风险:需谨慎,用户确认
  • 高风险:存在明显安全隐患,不推荐使用

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

General

通义晓蜜 - 智能外呼

触发阿里云晓蜜外呼机器人任务,自动批量拨打电话。适用于批量外呼、客户回访、满意度调查、简历筛查约面试等场景。可从前置工具或节点获取外呼名单。

Registry SourceRecently Updated
General

Letterboxd Watchlist

Scrape a public Letterboxd user's watchlist into a CSV/JSONL list of titles and film URLs without logging in. Use when a user asks to export, scrape, or mirror a Letterboxd watchlist, or to build watch-next queues.

Registry SourceRecently Updated
General

Seedance Video Generation

Generate AI videos using ByteDance Seedance. Use when the user wants to: (1) generate videos from text prompts, (2) generate videos from images (first frame, first+last frame, reference images), or (3) query/manage video generation tasks. Supports Seedance 1.5 Pro (with audio), 1.0 Pro, 1.0 Pro Fast, and 1.0 Lite models.

Registry SourceRecently Updated
4.2K17jackycser
General

Universal Skills Manager

The master coordinator for AI skills. Discovers skills from multiple sources (SkillsMP.com, SkillHub, and ClawHub), manages installation, and synchronization...

Registry SourceRecently Updated