threat-intelligence — 实用工具
v1.0.0threat-intelligence是一款实用的工具技能,能够帮助用户完成相关任务,提升工作效率。
0· 110·0 当前·0 累计
安全扫描
OpenClaw
可疑
high confidenceThe skill's instructions reference a local Python script and an INTEL_API_KEY but the package contains no code and does not declare the env var — the pieces don't add up.
评估建议
Do not install or provide secrets to this skill yet. Ask the publisher for the missing pieces: the scripts/threat_intelligence.py source, a clear install or runtime environment description, and an explanation of where INTEL_API_KEY is used and which external service it contacts. Verify the skill's source/homepage and review the code before giving any API keys. If the publisher cannot provide code or a reputable source, treat the skill as untrusted.详细分析 ▾
⚠ 用途与能力
The stated purpose (threat intelligence) is plausible, but the skill offers no code or install steps to implement it. The SKILL.md tells the agent to run python3 scripts/threat_intelligence.py, yet no script or code files are included in the bundle.
⚠ 指令范围
Runtime instructions require running a local script and exporting INTEL_API_KEY, but the agent package contains neither the script nor a clear API target. The instructions also lack input/output formats or destinations, giving broad, unsupported runtime expectations.
⚠ 安装机制
There is no install spec (instruction-only), which can be fine — except the instructions assume a local Python script exists. Without an install step or bundled code, the skill as distributed cannot perform the described actions.
⚠ 凭证需求
SKILL.md asks users to set INTEL_API_KEY, but the skill's declared requirements list no required env vars and no primary credential. Requesting an API key is reasonable for this purpose, but the env var is not declared in metadata and there's no information about where the key would be sent or how it is used.
✓ 持久化与权限
The skill does not request always:true and has no special OS or install privileges. It does not request any config paths or other skills' settings.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install jpeng-threat-intelligence
镜像加速npx clawhub@latest install jpeng-threat-intelligence --registry https://cn.longxiaskill.com 镜像可用