by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is instruction-only and simply provides rules and examples for writing Conventional Commits — it does not install software or request credentials. Before relying on it: (1) review any commit messages the agent generates before you actually run git commit, since messages can trigger CI/release automation; (2) if your repository has additional or stricter commit conventions, verify compatibility; and (3) avoid granting broader privileges (for example always:true or automated commit exec...详细分析 ▾
✓ 用途与能力
The skill's name and description match the SKILL.md content: both describe formatting commit messages according to the Conventional Commits spec. There are no extra binaries, env vars, or unrelated requirements.
✓ 指令范围
SKILL.md contains only guidance and examples for composing commit messages. It does not instruct the agent to read files, access environment variables, call external endpoints, or execute system commands beyond generating text for commit messages.
✓ 安装机制
No install specification or code files are present. This is the lowest-risk model (instruction-only) and nothing will be written to disk or downloaded during install.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths. Nothing requested appears disproportionate to the described purpose of generating/formating commit messages.
✓ 持久化与权限
The skill is not marked always:true and uses the default model-invocation settings. It does not request persistent system privileges or attempt to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/1/17
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install conventional-commits
镜像加速npx clawhub@latest install conventional-commits --registry https://cn.longxiaskill.com