by 安全扫描
OpenClaw
安全
high confidenceThe skill's files and runtime instructions are consistent with its stated purpose (generating Arco/Vue admin UI prototypes); it does not request credentials or unrelated system access, but it will create/update local project files and asks the agent to run package installation commands which fetch code from the network.
评估建议
This skill appears coherent for generating Arco/Vue admin prototypes, but before installing or allowing the agent to run it consider: 1) The skill will create and modify files under webui/admin-ui and may append to the bundled docs—review generated files before running them. 2) It asks the agent to run `pnpm install`/`pnpm dev` which will download packages from npm (network activity and supply-chain risk). Prefer to run package installs manually in a sandboxed environment. 3) The skill does not ...详细分析 ▾
✓ 用途与能力
Name/description (generate Vue 3 admin prototypes using Arco Design) match the provided artifacts: many component docs, page templates, and a scaffold manifest. There are no unrelated env vars, binaries, or unexpected permissions requested.
ℹ 指令范围
SKILL.md confines actions to reading the bundled knowledge files and creating/updating files under webui/admin-ui. It explicitly instructs how to scaffold, where to place generated files, and to add TODO placeholders for real APIs. This is expected for a code-generation/prototyping skill, but it does direct the agent to modify the workspace (append/update docs and create project files) and to run pnpm commands if initialization/validation is needed.
ℹ 安装机制
There is no formal install spec in the registry (instruction-only), which is lower risk. However, the runtime instructions tell the agent to run `pnpm install` (and optionally `pnpm dev`) in the generated project. That will fetch packages from the public registry (network access and supply-chain risk). This behavior is coherent with the purpose but worth noting to users.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. It also instructs 'Never store secrets.' There is no disproportionate request for sensitive data.
✓ 持久化与权限
Registry flags: always:false and normal model invocation. The skill will create/update files under its own intended path (webui/admin-ui) and the bundled knowledge docs; it does not request system-wide persistence or attempt to modify other skills' configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/9
Initial release of admin-ui-prototype skill: - Query concrete Arco Design component usage patterns within this admin UI project. - Generate Vue 3 admin page prototypes (list, form, detail, dashboard, modal) with realistic mock data, scaffold files, and route code. - Scaffolds and updates a minimal preview project at `webui/admin-ui` as needed. - Loads only the necessary docs for each request to stay efficient. - Strict output and code conventions: snake_case DTO fields, camelCase variables, CSS variables, scoped LESS, and Chinese UI copy by default.
● 无害
安装命令
点击复制官方npx clawhub@latest install admin-ui-prototype
镜像加速npx clawhub@latest install admin-ui-prototype --registry https://cn.longxiaskill.com
技能文档
Use this skill for two tasks:
- Look up 如何 Arco Design components used 在...中 管理员 UI.
- Generate runnable Vue 3 管理员 page prototype 带有 realistic mock data.
加载 仅 什么 needed
- 读取
knowledge/components/README.md第一个 到 locate 组件 docs. - 读取 仅 组件 docs needed 对于 请求.
- 读取
knowledge/ui-conventions.md对于 page structure, naming, 和 styling rules. - 读取
knowledge/page-templates.md对于 就绪-made page 和 路由 templates. - 读取
knowledge/scaffold.md仅 当...时webui/管理员-uineeds 到 initialized.
Answer 组件-usage questions
- 读取
knowledge/components/README.md. - 打开 matching 组件 docs 在...下
knowledge/components/. - 打开
knowledge/ui-conventions.md如果 布局 或 page-level context matters. - Answer 带有 project conventions 和 concrete patterns 从 bundled docs, 不 generic 框架 advice.
- 如果 新的 pattern discovered 从 real project code, append 到 relevant 组件 doc 和 更新 组件 索引 当...时 新的 组件 added. Never store secrets.
Generate page prototype
- 解析 请求 进入:
- 如果 missing details would materially 更改 布局 或 data 模型, ask short clarifying question. 否则 使 reasonable assumptions.
- 读取
knowledge/ui-conventions.md. - 读取
knowledge/page-templates.md. - 读取 仅 组件 docs 必填 对于 page 类型:
| Page type | Required docs |
|---|---|
| List | table.md, form.md, button.md, modal.md, tag.md, space.md, grid.md |
| Form | form.md, input.md, select.md, date-picker.md, checkbox.md, radio.md, divider.md |
| Detail | descriptions.md, card.md, tag.md, button.md |
| Dashboard | statistic.md, card.md, grid.md |
| Modal form | modal.md, form.md, input.md, select.md, spin.md, feedback-api.md |
Initialize 或 更新 预览 project
- 如果
webui/管理员-ui/包.json做 不 exist:
knowledge/scaffold.md
- 创建 scaffold files 在...下 webui/管理员-ui
- 替换 {{pageTitle}}, {{viewImportPath}}, 和 {{ViewComponent}}
- run pnpm install 在...中 webui/管理员-ui
- 如果 预览 project 已经 exists:
webui/管理员-ui/src/App.vue
- 更新 webui/管理员-ui/索引.html输出 requirements
- 创建 main page 在
webui/管理员-ui/src/views/{kebab-case-模块}/索引.vue. - 创建 child components 在...下
webui/管理员-ui/src/views/{kebab-case-模块}/components/当...时 page benefits 从 splitting dialogs 或 sections. - Provide 路由 snippet 从
knowledge/page-templates.md. - Keep 输出 runnable 带有 mock data unless 用户 explicitly asks 对于 API wiring 仅.
Generation rules
- 使用