安全扫描
OpenClaw
安全
high confidence该技能与其声明目的保持一致,通过小型 Bash 脚本提供本地只读参考内容,不需要凭证或网络访问。
评估建议
该技能看似是一个简单的本地参考,实现为 Bash 脚本,与其描述一致。安装前,可自行审查脚本(简短、可读),确认无网络调用或秘密访问;在安全环境中运行检查输出;注意可能的文档/版本不匹配(可能无害)。若要求严格的来源证明,请在信任或自动化该技能前验证 GitHub 仓库和作者(BytesAgain)。...详细分析 ▾
ℹ 用途与能力
Name/description promise a local DevOps bash-tools reference; the included script implements that by printing documentation texts. There are minor inconsistencies (metadata versions differ: registry v2.0.4, SKILL.md v2.0.3, script VERSION=2.0.2) and the cheatsheet lists a 'troubleshooting' command that isn't implemented, but these look like small documentation/versioning oversights rather than design mismatches.
✓ 指令范围
SKILL.md explicitly states no external API calls, no credentials, and outputs via heredoc. The runtime script only emits local heredoc content and has no network calls, file reads/writes beyond stdout, or attempts to access environment variables. Instructions and implementation stay within the described scope.
✓ 安装机制
There is no install spec (instruction-only). A single script file is bundled but nothing is downloaded or extracted at install time, so the install surface is minimal and low-risk.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths, and the script does not read env vars (aside from a minor non-expanding $VERSION in a quoted heredoc). There is no disproportionate credential access.
✓ 持久化与权限
always is false and the skill does not request persistent system presence or modify agent/system configuration. It is user-invocable only and does not elevate privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.42026/3/20
修复描述
● 无害
安装命令 点击复制
官方npx clawhub@latest install devops-bash-tools
镜像加速npx clawhub@latest install devops-bash-tools --registry https://cn.clawhub-mirror.com
技能文档
参考手册,涵盖入门、快速启动、模式等。快速查阅 DevOps Bash 工具概念、最佳实践和实现细节,无需 API 密钥或凭证。
命令
| 命令 | 描述 |
|---|---|
intro | 入门参考 |
quickstart | 快速启动参考 |
patterns | 模式参考 |
debugging | 调试参考 |
performance | 性能参考 |
security | 安全参考 |
migration | 迁移参考 |
cheatsheet | 快速参考表 |
输出格式
所有命令输出为纯文本参考文档,通过 heredoc。无外部 API 调用,无需凭证,无网络访问。Powered by BytesAgain | bytesagain.com | hello@bytesagain.com
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制