by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions, required tools, and behavior match its stated purpose of prompt optimization and conditioned sub-agent dispatch; it does not request extra credentials or install code, but it will read project files and use web/search tools when asked.
评估建议
This skill appears to do what it says: optimize prompts and optionally run clarifying questions, codebase inspection, or web research. Before installing or invoking +deep/+web, consider: (1) +deep will read your repository files — don't use it on repos that contain secrets or private data you don't want analyzed; (2) +web uses web search/fetch tools — avoid sending sensitive/proprietary prompt content you wouldn't want transmitted to external documentation/search; (3) the SKILL.md suggests copyi...详细分析 ▾
✓ 用途与能力
The name/description promise (optimize prompts, route to clarifying, codebase, or web sub-agents) matches the SKILL.md and agent files. The agents explicitly describe using AskUserQuestion, codebase exploration (Glob/Grep/Read/LS), and web search (WebSearch/WebFetch), which are coherent with the stated purpose.
ℹ 指令范围
Instructions legitimately direct the agent to read repository files and run web searches when +deep/+web are used; this is expected for codebase/web research. Note: SKILL.md outputs include a platform shell command (`echo 'PROMPT' | pbcopy`) which assumes a pbcopy clipboard utility (macOS) while the skill declares no required binaries—minor mismatch. Also be aware that +deep causes reading project files, which can surface sensitive contents if present.
✓ 安装机制
Instruction-only skill with no install spec and no code files to write or execute. Lowest-risk install profile.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The agents' behaviors (file reads, web searches, user questions) are proportionate to prompt-optimization tasks.
✓ 持久化与权限
always:false and no mechanism for persistent system-wide changes or for modifying other skills. Normal autonomous invocation is allowed (default) but not excessive here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv3.1.02026/1/30
promptify-skill 3.1.0 – Adds agent dispatching, auto-detection, and unified prompt structure for better optimization. - Introduced smart agent routing for codebase research, clarifying questions, and web search based on prompt signals or user modifiers. - Ensures every prompt includes role, task, constraints, and output (core contract). - Improved output: always provides an optimized code-block prompt, clipboard copy command, and clear explanation. - Enhanced support for various prompt types (coding, writing, analysis, creative, data) with tailored contract elements and structure. - Now strips filler language and applies consistent formatting, including XML tags for complex prompts.
● 可疑
安装命令 点击复制
官方npx clawhub@latest install promptify-skill
镜像加速npx clawhub@latest install promptify-skill --registry https://cn.clawhub-mirror.com
技能文档
Transform prompts into clear, effective ones. Model-agnostic.
Modifiers (parse from ARGUMENTS)
- +ask → Force clarifying questions
- +deep → Force codebase exploration
- +web → Force web search
No modifiers? Auto-detect what's needed.
Auto-Detection Triggers
| Trigger | Signals |
|---|---|
| codebase-researcher | "this project", "our API", specific files/functions, "integrate", "extend", "refactor" |
| clarifier | Ambiguous ("make it better"), multiple interpretations, missing constraints, vague pronouns |
| web-researcher | "best practices", "latest", external APIs/libraries, framework patterns, year references |
Agent Dispatch
When agents needed:
- Announce which and why
- Run in parallel via Task tool (agents/ directory)
- Synthesize findings
- Optimize with gathered context
Core Contract (every prompt needs all four)
| Element | If Missing |
|---|---|
| Role | Add persona with expertise |
| Task | Make action specific |
| Constraints | Infer from context |
| Output | Specify format/structure |
Process
- If image: Analyze, incorporate context
- Detect type: coding/writing/analysis/creative/data
- Convert output→process: "Write X" → "Analyze → Plan → Implement → Validate"
- Strip fluff: "please", "I want you to", filler, apologies
- Apply contract: Verify all 4 elements
- Add structure: XML tags for complex prompts
Type Focus
- Coding: Specs, edge cases, framework
- Writing: Tone, audience, length
- Analysis: Criteria, depth
- Creative: Constraints, novelty
- Data: I/O format, edge cases
Output
- Optimized prompt in code block
echo 'PROMPT' | pbcopy- 2-3 sentence explanation
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制