by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to do what it says (manage wiki.json with three pools) but take three precautions before installing: 1) Ensure the runtime environment has jq (or update the skill metadata to require/install it); otherwise the provided shell commands will fail. 2) Inspect any existing wiki.json entries and agree what paths are allowed in the source field — the skill's instructions will read files at those paths (e.g., memory/..., skills/...), which could expose unrelated local data if entries ...详细分析 ▾
ℹ 用途与能力
Name/description align with the provided instructions: a single wiki.json and three-pool lifecycle. However SKILL.md relies on the jq command (and standard shell tools like cat/cp) while the skill metadata declares no required binaries — this is an undeclared dependency that should be declared or removed.
⚠ 指令范围
Instructions use exec to run shell commands (cat, jq, cp) and explicitly tell the agent to read files referenced in entry.source (e.g., memory/..., skills/...). That is coherent for restoring detailed content, but it permits reading arbitrary paths referenced in wiki.json and thus could access other skills' files or other local data unless those source paths are constrained. No guidance or path whitelisting is provided.
ℹ 安装机制
This is instruction-only (no install spec) which is low-risk. Note: because the runtime commands require jq, the lack of an install specification or declared dependency means installation/runtime may fail or silently rely on an environment having jq — declare jq or provide an install step.
✓ 凭证需求
The skill requests no environment variables, no credentials, and no config paths. That is proportional to its stated purpose.
✓ 持久化与权限
always is false and autonomous invocation is default. The skill does not request elevated persistence or to modify other skills' configs. It suggests periodic checks but does not force always-on behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install wiki-manager
镜像加速npx clawhub@latest install wiki-manager --registry https://cn.longxiaskill.com镜像同步中