by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill is coherent for generating competition-style C++ problems: it compiles and executes user/AI-provided C++ generator/validator/solution code and expects to run that inside a Docker sandbox image named cpp-sandbox. Before installing or running: 1) verify the origin and integrity of the cpp-sandbox image (the SKILL.md points to a GitHub Releases page); do not load images from untrusted sources into Docker on sensitive machines. 2) Understand that the skill will compile and execute arbitra...详细分析 ▾
✓ 用途与能力
The skill's name/description (generate problems, validators, test data using testlib) matches the included files (generator/validator templates, testlib.h, scripts/generate.py). Requiring compilation and execution of C++ generators/validators/solutions is expected for this purpose.
ℹ 指令范围
SKILL.md gives detailed runtime SOP: read user input/std.cpp, generate gen.cpp/valid.cpp/problem.md, create files in the workspace, compile and run them in a Docker sandbox, and postprocess outputs. It intentionally instructs reading references/* files and writing to the user's working directory — this is coherent for generating test data. It does instruct the agent to run host docker commands and to prompt the user to download a docker image from a GitHub Releases page if the cpp-sandbox image is missing; that is outside the skill bundle and requires user attention.
ℹ 安装机制
There is no automated install spec (instruction-only), which is low-risk. However, the runtime flow requires a local Docker image named cpp-sandbox:latest (the SKILL.md points users to a GitHub Releases URL to obtain it). Downloading and loading an external image is a non-trivial action and should be verified by the user before use.
✓ 凭证需求
The skill declares no environment variables, no credentials, and no config paths. It does require the ability to run Docker and to read/write the current working directory (expected). No unrelated secrets or system credentials are requested.
✓ 持久化与权限
always is false, no special persistence requested, and the skill does not attempt to modify other skills or system-wide agent configuration. The code will create files in the working directory (problem_temp/ and outputs) which is expected behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/3/29
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install cpp-problem-generator
镜像加速npx clawhub@latest install cpp-problem-generator --registry https://cn.longxiaskill.com