by 安全扫描
OpenClaw
安全
medium confidenceThe skill's instructions and requirements are coherent with its stated purpose (viewing bug details from a local BugPack service), with a small ambiguity about how 'relatedFiles' should be used to locate source code.
评估建议
This skill is coherent for viewing bug details from a BugPack service running on your machine (http://localhost:3456). Before installing, confirm you want the agent to contact that local service and that the service is running on that port. Be aware that the instructions suggest using 'relatedFiles' to locate source code; although the skill does not explicitly instruct reading files, an agent with filesystem access could attempt to read repository files. If you do not want that, restrict the age...详细分析 ▾
✓ 用途与能力
Name/description align with the runtime instructions: it fetches bug details from BugPack via an HTTP GET to a localhost API and surfaces screenshots, env info, and related files. No unrelated credentials, binaries, or installs are requested.
ℹ 指令范围
Instructions limit network access to http://localhost:3456 and describe expected response fields. However the directive 'use [relatedFiles] to locate relevant source code' is ambiguous — it could imply reading local repository files or accessing other services, but the SKILL.md does not specify how to fetch file contents or which paths are allowed.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is written to disk during install.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths; this is proportional to its described purpose of querying a local BugPack API.
✓ 持久化与权限
Defaults are used (always: false, agent invocation allowed). The skill does not request permanent presence or special privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/18
- Added documentation providing clear instructions on how to fetch and display full bug details using BugPack. - Outlined response structure, including fields like title, environment info, related files, and screenshots. - Clarified proper usage and scenarios where this skill should be applied. - Introduced guidance for leveraging screenshots and related files to aid bug understanding. - Provided example API call and response for reference.
● 无害
安装命令
点击复制官方npx clawhub@latest install bugpack-view-bug
镜像加速npx clawhub@latest install bugpack-view-bug --registry https://cn.longxiaskill.com