安全扫描
OpenClaw
安全
high confidenceThe skill's requests, instructions, and files are consistent with a simple web-page fetcher that posts a URL to Zhipu's Reader API; nothing in the package appears disproportionate or covert.
评估建议
This skill legitimately forwards the URL and fetch options to Zhipu's Reader API at open.bigmodel.cn, so avoid using it with private/internal URLs or pages containing sensitive data you don't want sent to a third party. Keep your ZHIPU_API_KEY secret and scoped appropriately. Confirm the endpoint (open.bigmodel.cn) is acceptable for your data governance, and consider network egress rules or monitoring if you need to prevent uploads of internal URLs. Otherwise the package is straightforward and m...详细分析 ▾
✓ 用途与能力
Name/description, required binary (curl), required env var (ZHIPU_API_KEY), and the included shell script all align with a web-page fetching/reader integration for Zhipu's API.
✓ 指令范围
SKILL.md and the script only send the provided URL and explicit fetch options to the documented API endpoint; they do not read other files, environment variables, or system state beyond ZHIPU_API_KEY.
✓ 安装机制
No install spec; the skill is instruction-only with a simple shell script. Nothing downloads/extracts or installs third-party code.
✓ 凭证需求
Only ZHIPU_API_KEY is required and it is used directly in the Authorization header as expected. No unrelated credentials or high-privilege paths are requested.
✓ 持久化与权限
always is false and the skill does not request system-wide changes. The default autonomous-invocation flag is present (normal) but not combined with other concerning privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/14
Initial release of Zhipu Web Page Reader Tool. - Fetches and parses web page content into structured Markdown or plain text using cURL. - Supports fetching page metadata (title, description, keywords) and configurable caching. - Offers options to retain or exclude images, disable GFM, and include image/link summaries. - Provides both API usage instructions and a convenient wrapper shell script. - Requires `ZHIPU_API_KEY` environment variable and `curl` installed.
● 无害
安装命令 点击复制
官方npx clawhub@latest install zhipu-web-fetch
镜像加速npx clawhub@latest install zhipu-web-fetch --registry https://cn.clawhub-mirror.com
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制