by 安全扫描
OpenClaw
可疑
medium confidenceThe package is coherent with its stated goal (bootstrapping a local agent) but contains several behaviors that warrant caution—automatic file reading/writing, silent startup, automatic git commits, crons and shell actions—that could surprise or expose sensitive data if you run it without review or isolation.
评估建议
Scaffold appears to do what it advertises (make a persistent local agent), but it grants broad, high-impact capabilities to your agent and tells it to run some things silently. Before installing or running the setup script: 1) Inspect setup-wizard.sh and HOOKS.md line-by-line for any network calls, external endpoints, or destructive commands. 2) Don't run it on a machine containing secrets or production data—use a disposable VM or container. 3) Remove or .gitignore any files that contain credent...详细分析 ▾
✓ 用途与能力
Files, docs, and the setup script align with the stated purpose: building a local agent workspace, seeding identity/memory files, providing hooks, crons and prompt packs. No unrelated env vars, binaries, or remote installs are requested.
⚠ 指令范围
Runtime instructions (SKILL.md, HOOKS.md, FIRST-SESSION.md) direct the agent to read many workspace files (MEMORY.md, USER.md, daily logs), run shell commands (openclaw cron list), and perform lifecycle hooks automatically. HOOKS.md explicitly says 'Do not ask permission' and 'Do not announce you're running the startup sequence', which enables silent automatic file access and actions—this is broader and more stealthy than typical 'read a config' guidance.
ℹ 安装机制
There is no remote install or third-party download; the skill is instruction-only plus a local shell script (setup-wizard.sh) that populates placeholders. This lowers supply-chain risk, but the script will write/modify workspace files and should be inspected before running.
⚠ 凭证需求
The package does not request credentials, but its intended behavior requires wide access: filesystem read/write, shell execution, git commits, cron scheduling and potential network deliveries (Telegram/Discord/webhooks). Those capabilities are proportional to an 'agent OS' but are high-privilege; they can expose secrets if any credentials or tokens exist in workspace files. The skill gives no automated gating around sending external messages.
⚠ 持久化与权限
The skill will modify workspace state (write memory files), create cron-driven actions, spawn sub-agents and perform automatic git commits on task completion. While 'always' is false, the combination of autonomous hooks + silent startup + automatic commits increases risk if misconfigured.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/11
- Updated security and ease of use - No functionality or file changes in this release.
● 无害
安装命令 点击复制
官方npx clawhub@latest install scaffold
镜像加速npx clawhub@latest install scaffold --registry https://cn.clawhub-mirror.com
技能文档
agent. Configured 到 您. Remembers everything.
Scaffold gives your AI agent a real operating system — memory, identity, behavioral rules, and lifecycle hooks — so it knows who you are, what you're building, and how to behave consistently across sessions.
什么's Included
- AGENTS.md — behavioral rulebook, agent's operating constitution
- SOUL.md — personality 和 anti-patterns (没有 's chatbot)
- HOOKS.md — lifecycle hooks: startup, task complete, 错误 handling
- 第一个-会话.md — guided onboarding 带有 3 用户 profiles
- setup-wizard.sh — auto-populates 所有 placeholders 和 seeds workspace
- THIRTY-DAYS.md — week-由-week roadmap 对于 第一个 month
- PROMPT-PACK.md — 25 就绪-到-使用 prompts 对于 research, planning, writing, 和 更多
- Pre-built memory files — lessons learned, 活跃 task 队列
Quick 开始
clawhub install scaffold-lite
cd ~/.openclaw/workspace
bash setup-wizard.sh
Then open a session and say: "I'm ready for the first session."
Upgrade
Scaffold Full adds: SESSION-STATE.md + WAL protocol, MULTI-MODEL-ROUTING.md ($480-660/year savings), Scout/Forge/Quill sub-agent templates, HEARTBEAT.md, named workflows, and more.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制