风险评分

94/100 (Very Low)

OpenClaw: benign
VirusTotal: benign
StaticScan: unknown

Security Checker

作者: johstracke
Slug:security-checker
版本:1.0.1
更新时间:2026-02-28 11:41:05
风险信息

OpenClaw: benign

查看 OpenClaw 分析摘要(前 200 字预览)
This skill is internally consistent: its code and instructions implement a local, static Python security scanner and do not request extra credentials, perform network calls, or persistently alter the ...

[内容已截断]

VirusTotal: benign VT 报告

静态扫描: unknown

README

README 未提供

文件列表

无文件信息

下载
下载官方 ZIP
原始 JSON 数据
{
    "latestVersion": {
        "_creationTime": 1770493009770,
        "_id": "k978r13rsf8x4ydwncafata3zh80pjjz",
        "changelog": "Enhanced detection: Now catches file write operations (.write_text, .write_bytes, open for writing) in addition to existing checks. Improved security scanner to detect potential malicious file write patterns before publishing.",
        "changelogSource": "user",
        "createdAt": 1770493009770,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "johstracke",
        "handle": "johstracke",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/63787617?v=4",
        "kind": "user",
        "linkedUserId": "kn70rksnpn40gcenmtfkwdgdvs80q1ak"
    },
    "ownerHandle": "johstracke",
    "skill": {
        "_creationTime": 1770492760341,
        "_id": "kd78a3szscdm4ftx06wzqakyxd80q8wa",
        "badges": [],
        "createdAt": 1770492760341,
        "displayName": "Security Checker",
        "latestVersionId": "k978r13rsf8x4ydwncafata3zh80pjjz",
        "ownerUserId": "kn70rksnpn40gcenmtfkwdgdvs80q1ak",
        "slug": "security-checker",
        "stats": {
            "comments": 0,
            "downloads": 1154,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 2
        },
        "summary": "Security scanner for Python skills before publishing to ClawHub. Use before publishing any skill to check for dangerous imports, hardcoded secrets, unsafe file operations, and dangerous functions like eval\/exec\/subprocess. Essential for maintaining trust and ensuring published skills are safe for others to install and run.",
        "tags": {
            "audit": "k978r13rsf8x4ydwncafata3zh80pjjz",
            "latest": "k978r13rsf8x4ydwncafata3zh80pjjz",
            "safety": "k978r13rsf8x4ydwncafata3zh80pjjz",
            "security": "k978r13rsf8x4ydwncafata3zh80pjjz",
            "tools": "k978r13rsf8x4ydwncafata3zh80pjjz"
        },
        "updatedAt": 1772250065311
    }
}