by 安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions match its stated purpose (managing a local hierarchical channel/state file); it does not request credentials or perform obvious network/exfiltration actions, but it does persist state under /root and reads environment variables that were not declared in the registry metadata.
评估建议
This skill appears to do what it says: local hierarchical channel/session management stored in a JSON file. Before installing or running it, consider: 1) It will create and update /root/.openclaw/workspace/channel_tree/universe.json — if you don’t want data under /root, edit BASE_DIR in the script or run as a different user. 2) The script reads optional env vars named CHANNEL_TREE_HALL/UNIVERSE/WORLD/FOREST/SESSION (these were not listed as required in the registry metadata); setting them contro...详细分析 ▾
✓ 用途与能力
Name/description describe hierarchical channel/session management and the included Python script implements create/list/switch/monitor operations and a JSON state file — the required files and behavior are coherent with the stated purpose.
✓ 指令范围
SKILL.md instructs running the included script and setting optional CHANNEL_TREE_* environment variables. Commands and documented state path (/root/.openclaw/workspace/channel_tree/universe.json) align with the script's behavior. There are no instructions to read unrelated system files or to send data externally.
✓ 安装机制
No install spec is present (instruction-only with a bundled script). No external downloads or package installs are performed by the skill, minimizing install-time risk.
ℹ 凭证需求
The registry declares no required environment variables but both SKILL.md and the script use optional CHANNEL_TREE_* variables (CURRENT_*). This is proportionate to the skill's purpose, but the registry metadata could have listed them. The skill does not request credentials or secret variables.
ℹ 持久化与权限
The skill creates and writes persistent state to /root/.openclaw/workspace/channel_tree/universe.json. always:false (not force-included) and it does not modify other skills. Users should be aware state is stored on disk (under /root by default) and may want to change BASE_DIR or run under a non-root account if that is a concern.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv3.1.02026/3/27
Added ->0 command for history sync. Improved documentation. Multi-hall support.
● 无害
安装命令
点击复制官方npx clawhub@latest install channel-tree
镜像加速npx clawhub@latest install channel-tree --registry https://cn.longxiaskill.com