安全扫描
OpenClaw
安全
medium confidenceThe skill's instructions and requirements match its stated purpose (anonymous static-site publishing via the provided API); it asks for no credentials and has no install step, but the service backend is an unknown third-party domain so exercise caution about what you upload.
评估建议
This skill appears coherent with its stated purpose and asks for nothing extra, but note the service runs on an unknown domain (667661.xyz) with no homepage or source listed. Before using: (1) avoid uploading any private or secret data (API keys, credentials, proprietary code), since the publisher is anonymous; (2) treat published sites as public and ephemeral (30–60 day lifecycle); (3) store your site_key securely if you reuse it for updates; (4) if you need guarantees (privacy, uptime, legal p...详细分析 ▾
✓ 用途与能力
Name/description (anonymous static site publisher) align with the SKILL.md: endpoints, upload/query/delete operations, size/zip/index.html constraints and slug rules are all consistent with that purpose. No unrelated credentials or binaries are requested.
✓ 指令范围
Runtime instructions only describe HTTP calls to the documented API (POST multipart for zip upload, GET, DELETE). They do not instruct reading local files beyond the uploaded zip nor accessing unrelated environment variables or system paths.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest-risk delivery model. Nothing will be written to disk by an installer.
✓ 凭证需求
No environment variables, secrets, or platform credentials are requested. The requirement set is minimal and proportionate to the described capability.
✓ 持久化与权限
always is false and the skill does not request persistent/system-wide configuration changes or special privileges. Normal autonomous invocation is allowed (platform default).
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
AI-friendly static site publishing API skill (zip upload, slug, lifecycle, errors).
● stale
安装命令 点击复制
官方npx clawhub@latest install quickstatic
镜像加速npx clawhub@latest install quickstatic --registry https://cn.clawhub-mirror.com
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制