by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's actions match its stated purpose (organizing the desktop) but its runtime instructions would autonomously perform destructive file operations without strong safeguards or explicit user confirmation, which is risky.
评估建议
This skill appears to do what it says (backup + move desktop files), but it will automatically perform destructive file operations without strong safeguards. Before enabling or running it: (1) Review and edit SKILL.md to require explicit user confirmation before moving files (remove the 'directly continue' clause); (2) Test on a disposable folder (not your real Desktop) to verify behavior; (3) Ensure backups are created in a safe location (not inside the Desktop) and manually verify the backup c...详细分析 ▾
✓ 用途与能力
Name/description describe desktop file organizing and the SKILL.md only references desktop paths, backups, listing and move/copy operations — required capabilities align with the stated purpose and there are no unrelated environment variables or external services requested.
⚠ 指令范围
The instructions tell the agent to automatically scan, backup and then move files without requiring user confirmation ('此步骤仅为展示，无需等待用户确认，直接继续后续步骤'). Backup is required, but the spec does not require an explicit check of backup integrity (only prints path), has no dry-run option, and contains hard-coded example move commands that could be misapplied. These factors increase the risk of unexpected or irreversible file moves.
✓ 安装机制
Instruction-only skill with no install spec or third-party downloads; nothing written to disk by an installer. This minimizes install-time risk.
✓ 凭证需求
No environment variables, credentials, or config paths requested. The skill only uses standard shell/PowerShell environment variables (HOME, USERPROFILE) appropriate to the task.
ℹ 持久化与权限
always:false (normal). The skill can be invoked autonomously by the agent (platform default). Autonomous invocation combined with automatic destructive behavior in the instructions increases blast radius — the default autonomy is not by itself a problem but is relevant given the instruction-scope concerns.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/17
desktop-organizer v1.0.0 - Initial release of a cross-platform skill for safely organizing desktop files on macOS, Linux, and Windows. - Provides standard backup-first workflow to prevent accidental data loss. - Automatically categorizes files by type, keywords, or folder, following customizable rules. - Includes clear system path mapping, conflict handling strategy, and post-operation reporting. - Supports safe deletion of empty folders and manual backup retention after sorting.
● 无害
安装命令
点击复制官方npx clawhub@latest install desktop-organizer
镜像加速npx clawhub@latest install desktop-organizer --registry https://cn.longxiaskill.com