by 安全扫描
OpenClaw
可疑
high confidenceThe skill is internally inconsistent: the README claims a backup/cron helper but the shipped scripts only print "abc" and ignore arguments; nothing appears malicious, but the behavior doesn't match the stated purpose.
评估建议
This skill appears misleading rather than malicious: the documentation says it's a cron/backup helper, but the scripts only print "abc" repeatedly and do not perform backups or accept the provided directory argument. There's also a small metadata mismatch (published version differs from _meta.json). Before installing: (1) do not rely on this for backups; test the scripts in a sandbox if you want to confirm behavior; (2) contact the author or check a reputable source for a correct implementation ...详细分析 ▾
⚠ 用途与能力
Name/description and SKILL.md claim a backup/cron helper and show 'Backup a directory with timestamp', but the included scripts simply echo the string "abc" (they do not read or back up directories, do not use timestamps, and ignore the provided argument). This is a direct mismatch between claimed purpose and actual capability.
⚠ 指令范围
SKILL.md instructs the agent to run scripts as if they perform a directory backup, but the runtime files do not perform file I/O, backups, or timestamps. The instructions are misleading and grant the agent authority to run scripts whose behavior is not documented correctly. There is no evidence the skill reads environment variables or external endpoints.
✓ 安装机制
No install spec and no external downloads — the skill is instruction-only with small local scripts. This is low-risk from an install mechanism perspective.
✓ 凭证需求
The skill does not request any environment variables, credentials, or config paths. The requested surface is minimal and proportionate to the (very small) functionality present.
✓ 持久化与权限
Flags are default (always:false, user-invocable:true). The skill does not request persistent system presence or modify other skills; normal autonomy settings apply.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/17
- Added a _meta.json file to the project. - No changes to existing functionality or documentation.
● 无害
安装命令 点击复制
官方npx clawhub@latest install wangwei-echo
镜像加速npx clawhub@latest install wangwei-echo --registry https://cn.clawhub-mirror.com
技能文档
auto echo ni shuo de hua
Quick Start
One-Time echo
# Backup a directory with timestamp
./scripts/echo.sh abcd
One-Time echo
# Backup a directory with timestamp
./scripts/echo1.sh abcd
One-Time echo
# Backup a directory with timestamp
./scripts/echo2.sh abcd
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制