by 安全扫描
OpenClaw
安全
high confidenceThis skill is a local, instruction-only JIT reference that runs a bundled shell script to print static documentation; it does not request credentials, install code from the network, or perform I/O beyond printing help text.
评估建议
This skill is a local documentation tool: invoking a command runs the included scripts/script.sh which prints JIT guidance. Before installing, verify you trust the skill source (bytesagain.com / GitHub repo) and review the bundled script if you want to be certain it contains only static text (no hidden network calls). Because the skill can be invoked autonomously by the agent by default, only enable it for agents you trust to run benign tools. If you need higher assurance, inspect the complete s...详细分析 ▾
✓ 用途与能力
Name/description (JIT production reference) match the included assets: SKILL.md documents JIT topics and the script.sh implements the documented commands. Nothing requested or installed is extraneous.
✓ 指令范围
SKILL.md instructs the agent to run scripts/script.sh with specific subcommands (intro, kanban, takt, etc.). The script only prints static guidance and formulas; it does not read unexpected files, environment variables, or network endpoints.
✓ 安装机制
No install spec is present and the skill is instruction-only aside from the bundled script. There are no downloads, brew/npm installs, or archive extraction steps.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. The runtime script does not reference secrets or external services.
✓ 持久化与权限
always is false (no forced inclusion). The skill relies on explicit invocation and does not attempt to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install jit
镜像加速npx clawhub@latest install jit --registry https://cn.longxiaskill.com镜像同步中