by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and implements exactly what it claims: scanning a local project directory and producing a Markdown introduction. Before installing or running it, consider: (1) it requires Node.js and filesystem read/write access — avoid pointing it at sensitive system or credential directories; (2) the README suggests cloning from a third‑party Git host (gitcode.com) — verify the source and integrity of the repository you install; (3) review the included index.js (present here) yours...详细分析 ▾
✓ 用途与能力
Name/description claim to analyze local code projects and produce documentation, and the included index.js implements exactly that: scanning files, detecting common manifest files, summarizing directories, and generating a Markdown report. No unrelated credentials, remote APIs, or unrelated binaries are requested.
✓ 指令范围
SKILL.md instructs the agent to scan a specified local path and generate a doc. The implementation only reads project files (package.json, README.md, manifests) and directory entries (skips node_modules/venv and dotfiles), limits recursion depth, and optionally writes an output file. It does not instruct the agent to read unrelated system files, environment variables, or transmit data externally.
✓ 安装机制
There is no automated install spec in the registry entry (instruction-only skill). README suggests cloning from a Git host, but that is a user-facing install hint rather than an automated download step. No archives or remote installers are executed by the skill itself.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config paths. The code only needs local filesystem access (Node.js runtime), which is proportionate to the stated functionality.
✓ 持久化与权限
Skill flags show default behavior (always: false) and allow user invocation. It does not request permanent presence, nor does it modify other skills or system-wide settings. Autonomous invocation is allowed by platform default but is not combined with other red flags here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/8
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install code-project-analyzer
镜像加速npx clawhub@latest install code-project-analyzer --registry https://cn.longxiaskill.com