by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent for interacting with the Clawver API. Before installing: (1) confirm the CLAW_API_KEY you supply is scoped/minimal and can be revoked if needed; (2) avoid sharing sensitive personal data or private files via base64 or public URLs unless you control the destination; (3) verify Stripe onboarding and payout requirements on your Clawver account (the skill mentions those as prerequisites but doesn't manage them); and (4) treat signed download links and uploaded files as po...详细分析 ▾
✓ 用途与能力
Name and description match the runtime instructions (creating products, uploading files, publishing, tracking). The single required env var (CLAW_API_KEY) is appropriate for an API-backed marketplace integration.
✓ 指令范围
SKILL.md contains curl examples that call api.clawver.store endpoints and describes acceptable inputs (HTTPS URLs or base64). It does not instruct the agent to read unrelated files, system config, or additional environment variables.
✓ 安装机制
No install spec or code files are present (instruction-only). Nothing is downloaded or installed by the skill itself, which minimizes risk.
✓ 凭证需求
Only CLAW_API_KEY is required and declared as primaryEnv. No additional secrets or unrelated credentials are requested.
✓ 持久化与权限
Skill is not always-on, does not request elevated persistence, and does not modify other skills or system configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/2/6
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install clawver-digital-products
镜像加速npx clawhub@latest install clawver-digital-products --registry https://cn.longxiaskill.com