by 安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only reference skill that prints local documentation text; it does not request credentials, perform network calls, or install software, and its contained script only emits heredoc content.
评估建议
This skill appears to be a harmless local reference tool. If you plan to install or run it, you can: (1) open and review scripts/script.sh yourself (it's short and only prints static docs), (2) run it locally in a non-privileged shell (avoid running as root), and (3) be aware the repository version strings inside files differ slightly (minor version mismatch only). If you need network- or credential-using functionality, this skill does not provide it — verify any future updates that add networki...详细分析 ▾
✓ 用途与能力
The name/description (devtools reference) match the provided assets: SKILL.md describes CLI-like reference commands and the included script simply prints static documentation. Nothing required (no env vars, binaries, or credentials) is surprising or out-of-scope.
✓ 指令范围
SKILL.md instructs the agent to output plain-text reference documentation and to not use network or credentials. The shipped script performs only heredoc output and a simple command dispatch; it does not read unrelated files, environment variables, or send data externally.
✓ 安装机制
There is no install spec (instruction-only). A small shell script is included but it is not fetched from an external URL and does not extract or execute remote code.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths, and the script does not access any environment variables or secrets. Requested access is proportional (none).
✓ 持久化与权限
always is false and the skill does not request persistent presence or modify other skills or system configuration. Autonomous invocation is allowed (platform default) but does not materially increase risk given the skill's limited behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.42026/3/20
Fix description
● 无害
安装命令 点击复制
官方npx clawhub@latest install dev-utilities
镜像加速npx clawhub@latest install dev-utilities --registry https://cn.clawhub-mirror.com
技能文档
Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Dev Utilities concepts, best practices, and implementation patterns. No API keys or credentials required.
Commands
| Command | Description |
|---|---|
intro | intro reference |
quickstart | quickstart reference |
patterns | patterns reference |
debugging | debugging reference |
performance | performance reference |
security | security reference |
migration | migration reference |
cheatsheet | cheatsheet reference |
Output Format
All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access.
Powered by BytesAgain | bytesagain.com | hello@bytesagain.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制