by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent and appears safe: it only describes a debugging process and asks for no secrets or installs. Before enabling, confirm how the agent will obtain logs and code (you may need to upload or grant repository access), avoid sharing sensitive secrets in Fix Reports, and consider trying it in a sandbox or with redacted data to verify behavior. If you do not want automatic invocation on every bug report, keep it user-invocable (it is not set to always:true).详细分析 ▾
✓ 用途与能力
The name and description (bug reflection / fix report workflow) match the SKILL.md instructions: collect bug info, analyze modules, check docs, run performance checks, and write a Fix Report. No unrelated binaries, env vars, or installs are requested.
✓ 指令范围
The instructions are focused on troubleshooting and reporting steps. They recommend collecting logs, screenshots, inspecting code modules, and comparing with official docs — all reasonable for a debugging workflow. Note: the skill states it must be triggered immediately on user bug reports, so using it may involve accessing project logs/code that the user must explicitly provide or permit.
✓ 安装机制
No install spec and no code files are present (instruction-only). This minimizes disk writes and third‑party downloads.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. Any access to logs or code would come from the agent's normal access to conversation or user-supplied files, which is proportionate to the stated purpose.
✓ 持久化与权限
always:false and no self-install behavior. The skill does not request persistent presence or elevated privileges beyond normal agent invocation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install bug-reflection
镜像加速npx clawhub@latest install bug-reflection --registry https://cn.longxiaskill.com