by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent with its stated purpose, but note that each lookup sends the (desensitized only on output) phone number to third‑party public endpoints (cx.shouji.360.cn and tcc.taobao.com). If you must avoid sending phone numbers off your network (corporate privacy rules, sensitive PII), do not use the skill or run lookups through a vetted internal service. Also ensure curl and python3 are available in your environment and consider possible rate limits or changes to those public APIs; th...详细分析 ▾
✓ 用途与能力
Name/description (China phone number lookup) match the required tools and actions: curl and python3 to call and parse public lookup endpoints and an offline prefix table as a fallback.
✓ 指令范围
SKILL.md only describes validating a phone number, calling public APIs (360 and Taobao), parsing/decoding JSON/JSONP, applying offline prefix rules, and formatting/desensitizing results. The instructions do transmit the queried phone number to third‑party endpoints (expected for this purpose) but do not instruct reading unrelated files or secret environment variables.
✓ 安装机制
Instruction-only skill with no install spec or code files; runtime only requires standard binaries (curl, python3). No downloads or archive extraction are requested.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The lack of secrets is proportionate to the described functionality.
✓ 持久化与权限
always is false and the skill does not request persistent system changes or to modify other skills. The skill does not declare autonomous elevation beyond normal model invocation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/20
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install china-phone
镜像加速npx clawhub@latest install china-phone --registry https://cn.longxiaskill.com