by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill is functionally what it claims: it manages isolated tmux sessions and runs the local 'claude' CLI to save supervision tokens. Key things to consider before installing or running it:
- Default auto mode is risky: start.sh defaults to --mode auto and the code sends '--dangerously-skip-permissions' to the claude CLI. That allows the spawned Claude process to run tools and make changes without interactive permission prompts. Use --mode plan or change the default to require permission for...详细分析 ▾
ℹ 用途与能力
Name/description match the implementation: scripts create isolated tmux sessions (tmux -L cc), start a local Claude CLI process, and provide monitoring/send/list/stop helpers. Required binaries (tmux, bash, optional claude) are appropriate for the stated workflow.
⚠ 指令范围
Runtime instructions and scripts operate only on local tmux sessions and files, which fits the purpose, but the workflow encourages using a completion callback (openclaw system event) and—critically—defaults to auto mode that runs 'claude' with '--dangerously-skip-permissions'. That setting allows the started Claude process to run tools without confirmation and may cause arbitrary actions in the target workdir. The SKILL.md/README explicitly promotes skipping permission prompts, which expands the agent's effective scope beyond passive monitoring.
✓ 安装机制
This is instruction- and script-based with no external downloads or installers. No install spec is provided; the files are plain bash scripts that will be written when the skill is installed. No network-based install URLs or archive extraction were observed.
ℹ 凭证需求
The skill declares no required environment variables or secrets and the scripts don't request credentials. However, it relies on an external 'claude' CLI which may itself use credentials or network access configured outside the skill; that is expected but worth being aware of.
⚠ 持久化与权限
The skill does not set always:true and does not modify other skills. However, its default behavior (start.sh default MODE='auto') instructs the Claude CLI to skip permission prompts ('--dangerously-skip-permissions'), effectively granting the spawned Claude session high autonomy over the working directory and tools. This is a design/privilege decision that significantly increases risk if used in untrusted or non-version-controlled repos.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSmacOS · Linux
版本
latestv1.1.02026/2/24
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install claude-code-pro
镜像加速npx clawhub@latest install claude-code-pro --registry https://cn.longxiaskill.com