by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only reference tool whose declared behavior (plain-text docs via heredocs) matches the included script and does not request credentials, make network calls, or perform unexpected actions.
评估建议
This skill appears to be a simple, local reference tool implemented as a shell script that prints documentation — low risk. Before installing, you can: (1) validate the version mismatch between registry (2.0.4), SKILL.md (2.0.3), and script (2.0.2); (2) quickly review the script (it's short and readable) or run it in a sandbox to confirm behavior; (3) be aware the docs recommend external debugging tools (tcpdump/wireshark) but the skill does not invoke them. If you need absolute assurance, check...详细分析 ▾
✓ 用途与能力
Name/description match the delivered artifacts: SKILL.md is a reference guide and scripts/script.sh implements the same set of commands and emits static documentation. No unrelated credentials, binaries, or install steps are requested.
ℹ 指令范围
SKILL.md states all commands output plain-text via heredoc and no network calls; the shell script implements only heredoc outputs and CLI dispatch. Minor inconsistency: SKILL.md lists version 2.0.3, registry metadata is 2.0.4, and the script VERSION is 2.0.2. The docs mention external debugging tools (tcpdump, wireshark) only as recommendations; the skill does not invoke them.
✓ 安装机制
No install spec and no downloads — the skill is instruction-only with a small script file. This is low-risk: nothing is written to disk by an installer and no external packages are fetched.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths, and the runtime script does not read environment secrets or config files. Proportional to its documentation-only purpose.
✓ 持久化与权限
always is false and model invocation is normal (user-invocable/autonomous allowed). The skill does not request or modify persistent agent/system configuration or other skills' settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.42026/3/18
Fix description
● 无害
安装命令 点击复制
官方npx clawhub@latest install envcheck
镜像加速npx clawhub@latest install envcheck --registry https://cn.clawhub-mirror.com
技能文档
Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Envcheck concepts, best practices, and implementation patterns. No API keys or credentials required.
Commands
| Command | Description |
|---|---|
intro | intro reference |
quickstart | quickstart reference |
patterns | patterns reference |
debugging | debugging reference |
performance | performance reference |
security | security reference |
migration | migration reference |
cheatsheet | cheatsheet reference |
Output Format
All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access.
Powered by BytesAgain | bytesagain.com | hello@bytesagain.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制