by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This tool is local-only and appears safe to use, but review the script before installing: it will create and append logs under ~/.local/share/datasets (history.log and per-command .log files) so don't log sensitive secrets into it. The JSON export code does not escape values and may produce invalid JSON if entries contain quotes/newlines — treat exports as potentially containing raw user data. Also confirm you have the full, untruncated script (the provided snippet looked cut off mid-function in...详细分析 ▾
✓ 用途与能力
Name/description (dataset ingestion, transforms, query, export) align with what is provided: a bash CLI that logs operations into per-command .log files under ~/.local/share/datasets. There are no extra binaries, cloud credentials, or unrelated capabilities requested.
✓ 指令范围
SKILL.md instructs the agent to run local CLI commands and explains local storage and exports. The included script only reads/writes files inside the declared data directory and uses common Unix utilities; it does not read unrelated system files, access network endpoints, or attempt to exfiltrate environment variables.
✓ 安装机制
There is no install spec (instruction-only skill) and the provided code is a single bash script. Nothing is downloaded at install time and no archives or remote installers are used.
✓ 凭证需求
The skill declares no required env vars, credentials, or config paths. The script uses HOME to determine a local data directory (expected) and does not request or use secrets or external service keys.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable. It does not modify other skills or global agent settings. Its persistence is limited to creating and updating files under the user's ~/.local/share/datasets directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install datasets
镜像加速npx clawhub@latest install datasets --registry https://cn.longxiaskill.com