by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and resource needs align with its stated purpose (continuity packet injection, deterministic runtime contracts, and shadow evals); it requires only python3 and creates local artifacts and a SQLite DB under the user's home directory, and does not request credentials or network installs.
评估建议
This skill appears internally coherent and implements the features it advertises. Before installing/running: (1) inspect the full code (the truncated files) if you need to guarantee no network calls or subprocess execution; (2) be aware it will create a SQLite DB at ~/.local/state/continuity-kernel/continuity.db (unless you override CONTINUITY_KERNEL_DB_PATH) and write receipts under ~/.cache/continuity-kernel; (3) run the scripts in a controlled environment (or container) if you want to avoid p...详细分析 ▾
✓ 用途与能力
Name/description (continuity kernel, llm_input injection, runtime contracts, shadow eval receipts) match the shipped Python code and CLI commands. Required binary is python3 only. The provided scripts and modules implement packet injection, deterministic hashing, drift scoring, and shadow eval harness consistent with the stated purpose.
ℹ 指令范围
SKILL.md commands run unit tests and Python scripts that read repository fixtures and write machine-readable receipts and artifacts. The runtime instructions create files under ~/.cache/continuity-kernel and ~/.local/state/continuity-kernel (SQLite DB) and can read provided trace JSONL files. There are no instructions to read unrelated system credentials, no external network endpoints referenced in the docs, and the code excerpts do not perform subprocess exec or network IO. Review omitted/truncated files before running to confirm there is no hidden network/exec behavior.
✓ 安装机制
No install spec (instruction-only) and the README claims Python stdlib only. Because there is no remote download/install step in the skill metadata, nothing will be pulled from arbitrary URLs during install. Running the included scripts will write local files but does not appear to install external packages.
✓ 凭证需求
The skill requests no environment variables or credentials. It documents a configurable DB path via CONTINUITY_KERNEL_DB_PATH but does not require secrets. File and path access (home dir cache/state) is proportional to the stated persistence/receipt features.
ℹ 持久化与权限
always:false and agent-autonomy flags are default. The skill persistently writes artifacts and a SQLite DB under the user's home (~/.cache and ~/.local/state) by design; this is expected for a continuity kernel but users should be aware of local disk writes and retention of audit artifacts.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.2.02026/2/22
Anvil AI rebrand + labs.anvil-ai.io normalization.
● 无害
安装命令
点击复制官方npx clawhub@latest install continuity-kernel
镜像加速npx clawhub@latest install continuity-kernel --registry https://cn.longxiaskill.com