by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only Coze bot development guide whose requirements and instructions match its stated purpose; it asks for no elevated privileges or installs, though it references using API tokens (which the user must provide when calling the Coze API).
评估建议
This skill is a documentation-only helper for building Coze bots and appears internally consistent. Before using it: (1) don't paste real API tokens into public prompts — the SKILL.md example uses a placeholder token; supply tokens securely when you actually call the API; (2) confirm you intend to interact with coze.cn / coze.com and that those endpoints are correct for your region; (3) because the skill's source/homepage are unknown, be cautious about trusting any external instructions that ask...详细分析 ▾
✓ 用途与能力
Name/description describe a Coze bot development assistant and the SKILL.md content is focused on bot building, plugins, workflows, knowledge bases and publishing channels — all coherent with the stated purpose.
ℹ 指令范围
The instructions stay within the domain of building and publishing Coze bots. The doc includes an example HTTP API call with an Authorization Bearer token (pat_xxx), but it does not instruct the agent to read unrelated files, environment variables, or system state. Metadata does not declare any required env vars even though the docs show how an API token would be used.
✓ 安装机制
No install spec and no code files (instruction-only). This is the lowest-risk model: nothing will be written to disk or automatically installed by the skill.
ℹ 凭证需求
The skill declares no required environment variables or credentials. The documentation shows usage of an API Bearer token for Coze, which is expected for calling the service; lack of declared env vars is not harmful but means the user must supply tokens at runtime. No unrelated secrets are requested.
✓ 持久化与权限
always is false, the skill does not request permanent presence or system-wide changes, and there are no installation scripts or config writes described.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install coze
镜像加速npx clawhub@latest install coze --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Coze — 实用工具 安装说明： 安装命令：["openclaw skills install coze","npx clawhub@latest install coze"]