安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to only wrap calls to a paired Android device via the OpenClaw gateway and does not request credentials or install software. Before installing: (1) confirm the paired Android node you use is trusted (the skill will issue commands to that device); (2) test with non-destructive commands first (order.getGoods, order.getSelectedGoods); (3) because model invocation is allowed by default, consider whether you want the agent to be able to call these commands autonomously (it could ad...详细分析 ▾
✓ 用途与能力
Name/description (ordering on a paired Android node) match the declared commands and the SKILL.md. It does not request unrelated binaries, credentials, or config paths.
✓ 指令范围
Runtime instructions are limited to calling the OpenClaw gateway node invoke API with specific command names and JSON params (get menu, add/remove items, view cart, submit). The SKILL.md does not instruct reading arbitrary files, environment variables, or contacting third-party endpoints outside the OpenClaw node API.
✓ 安装机制
No install spec and no code files—instruction-only. Nothing is downloaded or written to disk by the skill itself.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths; this is proportional for a gateway-node-invoke style adapter.
ℹ 持久化与权限
always:false (good). disable-model-invocation is false (agent may invoke the skill autonomously) — this is the platform default and not in itself a problem, but it means the agent could run order commands without explicit human confirmation unless you limit autonomous invocation elsewhere.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/6
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install order
镜像加速npx clawhub@latest install order --registry https://cn.longxiaskill.com 镜像可用