Agent Api Stability Sentinel — 实用工具
v1.0.0接口 compatibility 和 breaking-change detection specialist.
0· 212·2 当前·2 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's instructions match its stated purpose (live API compatibility testing); it is instruction-only with no install or declared credentials, but requires network access and likely test credentials at runtime — exercise caution and prefer staging/test environments.
评估建议
This skill is coherent for live API compatibility testing, but before using it consider: (1) Run tests against staging/test environments and test accounts—live requests can mutate data, trigger rate limits, or impact production. (2) Provide minimal, scoped credentials and rotate them after tests; the skill itself does not declare or restrict env credentials. (3) Review and approve any destructive test actions (DELETE/POST) before running. (4) Confirm network access policy and logging/audit requi...详细分析 ▾
✓ 用途与能力
Name/description (API stability testing) align with the instructions, which mandate live requests, contract validation, and breaking-change detection. There are no unexpected binaries or unrelated capabilities requested.
ℹ 指令范围
SKILL.md explicitly requires making ACTUAL HTTP requests to endpoints, testing auth flows, and verifying responses. This is appropriate for the stated purpose but can cause side effects on target systems (mutations, rate-limit triggering). The doc references an imported agent spec and tools (e.g., Bash, Read, WebFetch) from the original source, which the skill text does not expand on — this is an informational artifact but worth noting.
✓ 安装机制
No install spec and no code files means nothing will be written to disk during install. This is low-risk from an installation standpoint.
ℹ 凭证需求
The skill declares no required environment variables or credentials, yet its runtime tasks (auth/rate-limit testing, hitting protected endpoints) commonly require API keys or service credentials. This omission is explainable (credentials are typically provided per-test or by the user), but users should be aware credentials will be needed at runtime and the skill has no built-in protection/limits for how they might be used.
✓ 持久化与权限
always is false and model invocation is allowed (normal). The skill does not request persistent system changes or access to other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install agent-api-stability-sentinel
镜像加速npx clawhub@latest install agent-api-stability-sentinel --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Agent Api Stability Sentinel — 实用工具 安装说明： 安装命令：["openclaw skills install agent-api-stability-sentinel","npx clawhub@latest install agent-api-stability-sentinel"]