by 安全扫描
OpenClaw
安全
high confidenceThis is a documentation/reference skill for ClamAV that is internally consistent with its stated purpose and does not request excessive privileges or credentials.
评估建议
This skill is a static reference and appears to only print ClamAV documentation and example commands. It does not request credentials or auto-install software. Before running any of the example commands on your system, review them carefully: many examples will download files (curl/wget), update signature databases (freshclam), or start/enable services (systemctl) and should be run intentionally with appropriate privileges. The EICAR test file example is a standard safe test vector, but only fetc...详细分析 ▾
✓ 用途与能力
The name/description (ClamAV reference) matches the included SKILL.md and the script: both provide commands, configuration examples, and operational guidance for clamscan, freshclam, clamd, signatures, quarantine, automation, and performance. There are no unrelated required binaries, env vars, or config paths.
ℹ 指令范围
SKILL.md and scripts contain real command examples (e.g., freshclam, clamscan, clamdscan, curl/wget to fetch the EICAR test file, and examples of running systemctl). This is expected for an operational reference, but the examples include network operations and commands that, if executed on a host, will perform downloads, update databases, or change system state. The skill itself prints documentation — it does not appear to autonomously execute those potentially impactful commands.
✓ 安装机制
No install spec is provided (instruction-only with an included script). Nothing is downloaded or written to disk by an installer; the included script is a local documentation helper. Low install risk.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. Examples reference standard ClamAV paths (/etc/clamav, /var/lib/clamav) which are appropriate for the topic. No disproportionate secret access is requested.
✓ 持久化与权限
The skill is not always-enabled and does not request persistent system-level privileges. It does not modify other skills or global agent settings. Autonomous invocation is allowed (platform default) but not combined with other red flags.
⚠ scripts/script.sh:413
Dynamic code execution detected.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
publish v1.0.0
● 无害
安装命令
点击复制官方npx clawhub@latest install clamav
镜像加速npx clawhub@latest install clamav --registry https://cn.longxiaskill.com