安全扫描
OpenClaw
安全
high confidenceThe skill's files and runtime instructions are consistent with its stated purpose (generating Arco/Vue admin UI prototypes); it does not request credentials or unrelated system access, but it will create/update local project files and asks the agent to run package installation commands which fetch code from the network.
评估建议
This skill appears coherent for generating Arco/Vue admin prototypes, but before installing or allowing the agent to run it consider: 1) The skill will create and modify files under webui/admin-ui and may append to the bundled docs—review generated files before running them. 2) It asks the agent to run `pnpm install`/`pnpm dev` which will download packages from npm (network activity and supply-chain risk). Prefer to run package installs manually in a sandboxed environment. 3) The skill does not ...详细分析 ▾
✓ 用途与能力
Name/description (generate Vue 3 admin prototypes using Arco Design) match the provided artifacts: many component docs, page templates, and a scaffold manifest. There are no unrelated env vars, binaries, or unexpected permissions requested.
ℹ 指令范围
SKILL.md confines actions to reading the bundled knowledge files and creating/updating files under webui/admin-ui. It explicitly instructs how to scaffold, where to place generated files, and to add TODO placeholders for real APIs. This is expected for a code-generation/prototyping skill, but it does direct the agent to modify the workspace (append/update docs and create project files) and to run pnpm commands if initialization/validation is needed.
ℹ 安装机制
There is no formal install spec in the registry (instruction-only), which is lower risk. However, the runtime instructions tell the agent to run `pnpm install` (and optionally `pnpm dev`) in the generated project. That will fetch packages from the public registry (network access and supply-chain risk). This behavior is coherent with the purpose but worth noting to users.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. It also instructs 'Never store secrets.' There is no disproportionate request for sensitive data.
✓ 持久化与权限
Registry flags: always:false and normal model invocation. The skill will create/update files under its own intended path (webui/admin-ui) and the bundled knowledge docs; it does not request system-wide persistence or attempt to modify other skills' configuration.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/9
Initial release of admin-ui-prototype skill: - Query concrete Arco Design component usage patterns within this admin UI project. - Generate Vue 3 admin page prototypes (list, form, detail, dashboard, modal) with realistic mock data, scaffold files, and route code. - Scaffolds and updates a minimal preview project at `webui/admin-ui` as needed. - Loads only the necessary docs for each request to stay efficient. - Strict output and code conventions: snake_case DTO fields, camelCase variables, CSS variables, scoped LESS, and Chinese UI copy by default.
● 无害
安装命令 点击复制
官方npx clawhub@latest install admin-ui-prototype
镜像加速npx clawhub@latest install admin-ui-prototype --registry https://cn.clawhub-mirror.com
技能文档
Use this skill for two tasks:
- Look up 如何 Arco Design components used 在...中 管理员 UI.
- Generate runnable Vue 3 管理员 page prototype 带有 realistic mock data.
加载 仅 什么 needed
- 读取
knowledge/components/README.md第一个 到 locate 组件 docs. - 读取 仅 组件 docs needed 对于 请求.
- 读取
knowledge/ui-conventions.md对于 page structure, naming, 和 styling rules. - 读取
knowledge/page-templates.md对于 就绪-made page 和 路由 templates. - 读取
knowledge/scaffold.md仅 当...时webui/管理员-uineeds 到 initialized.
Answer 组件-usage questions
- 读取
knowledge/components/README.md. - 打开 matching 组件 docs 在...下
knowledge/components/. - 打开
knowledge/ui-conventions.md如果 布局 或 page-level context matters. - Answer 带有 project conventions 和 concrete patterns 从 bundled docs, 不 generic 框架 advice.
- 如果 新的 pattern discovered 从 real project code, append 到 relevant 组件 doc 和 更新 组件 索引 当...时 新的 组件 added. Never store secrets.
Generate page prototype
- 解析 请求 进入:
- 如果 missing details would materially 更改 布局 或 data 模型, ask short clarifying question. 否则 使 reasonable assumptions.
- 读取
knowledge/ui-conventions.md. - 读取
knowledge/page-templates.md. - 读取 仅 组件 docs 必填 对于 page 类型:
| Page type | Required docs |
|---|---|
| List | table.md, form.md, button.md, modal.md, tag.md, space.md, grid.md |
| Form | form.md, input.md, select.md, date-picker.md, checkbox.md, radio.md, divider.md |
| Detail | descriptions.md, card.md, tag.md, button.md |
| Dashboard | statistic.md, card.md, grid.md |
| Modal form | modal.md, form.md, input.md, select.md, spin.md, feedback-api.md |
Initialize 或 更新 预览 project
- 如果
webui/管理员-ui/包.json做 不 exist:
knowledge/scaffold.md
- 创建 scaffold files 在...下 webui/管理员-ui
- 替换 {{pageTitle}}, {{viewImportPath}}, 和 {{ViewComponent}}
- run pnpm install 在...中 webui/管理员-ui
- 如果 预览 project 已经 exists:
webui/管理员-ui/src/App.vue
- 更新 webui/管理员-ui/索引.html输出 requirements
- 创建 main page 在
webui/管理员-ui/src/views/{kebab-case-模块}/索引.vue. - 创建 child components 在...下
webui/管理员-ui/src/views/{kebab-case-模块}/components/当...时 page benefits 从 splitting dialogs 或 sections. - Provide 路由 snippet 从
knowledge/page-templates.md. - Keep 输出 runnable 带有 mock data unless 用户 explicitly asks 对于 API wiring 仅.
Generation rules
- 使用
. - Include runnable mock data 带有 在 最少 5 records 当...时 page 类型 needs dataset.
- Wrap mock loading 在...中
mockFetch带有 300 ms 超时 对于 列表-点赞 data flows. - 添加
// TODO: 替换为真实 API 调用在 每个 mock 或 placeholder API call. - 使用 Arco Design Vue components 对于 interaction controls.
- 使用 CSS variables such 作为
var(--color-*)代替 的 hard-coded colors. - 使用 scoped 更少 styles.
- 使用 snake_case 在...中 DTO fields 到 stay aligned 带有 backend APIs, 和 camelCase 对于 frontend variables.
- Keep UI 复制 在...中 Chinese unless 用户 asks 对于 另一个 language.
- 默认 page file 到
src/views/{kebab-case-模块}/索引.vue.
Final 响应
- 列表 generated files.
- Mention whether scaffold 是 created 或 reused.
- Include 路由 registration snippet.
- Call out remaining
// TODOplaceholders. - 开始
pnpm dev和 分享 local URL 仅 当...时 用户 asks 对于 预览 或 当...时 local validation 必填.
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制