by 安全扫描
OpenClaw
安全
high confidence安全扫描摘要：未提供
评估建议
安全评估：未提供...详细分析 ▾
✓ 用途与能力
The name/description (routing/orchestration) matches the code and SKILL.md. The skill invokes the 'octopus' CLI (falling back to 'npx @agentoctopus/cli'), and the declared binary requirements (node, npx) are appropriate for that behavior.
ℹ 指令范围
SKILL.md and scripts/invoke.js are consistent: the skill runs 'octopus ask "<query>"' and returns stdout. The README references optional sync and cloud-sync features (Gist/GitHub) which are user-invoked and not required. The runtime passes the current process.env into the child process and uses OCTOPUS_INPUT for input — this is expected for a subprocess adapter but means the invoked CLI will see the agent's environment and local octopus config.
✓ 安装机制
No install spec is included; the skill is instruction-only and the bundled script uses an external CLI. It may run 'npx' to execute the @agentoctopus/cli package if no suitable global binary exists; using npx at runtime is normal but does execute code fetched from the npm registry on demand.
ℹ 凭证需求
The skill declares no required environment variables or credentials, which matches its purpose. However, the child process is launched with the full process.env and will therefore have access to any environment secrets the agent has; additionally, the octopus CLI uses local config written by 'octopus connect openclaw' (which may hold tokens). These behaviors are expected for a CLI wrapper but are worth considering.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or global agent settings. Autonomous invocation is allowed (platform default) but is not combined with unusual privileges here.
⚠ scripts/invoke.js:20
Shell command execution detected (child_process).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install agentoctopus
镜像加速npx clawhub@latest install agentoctopus --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Agentoctopus Openclaw — 技能工具 安装说明： 安装命令：["openclaw skills install agentoctopus","npx clawhub@latest install agentoctopus","clawhub install agentoctopus"]
技能文档
未提供完整的 SKILL.md 文档内容