by 安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only Elixir performance review checklist and reference pack that is internally consistent with its stated purpose and requests no credentials or installs.
评估建议
This skill is a documentation-only review checklist for Elixir performance and appears coherent and low-risk. Note the SKILL.md refers to a verification protocol file that isn't included — that is likely a documentation bug rather than malicious behavior. Before using the skill with real code, avoid pasting sensitive secrets or credentials into the agent prompts (the skill does not need them). If you rely on the missing review-verification-protocol, ask the publisher for the file or inspect what...详细分析 ▾
✓ 用途与能力
Name and description match the contents: the skill is a code-review checklist and reference material for Elixir performance patterns. It requires no binaries, env vars, or external services, which is proportionate for a guidance-only skill.
ℹ 指令范围
SKILL.md and the included reference files confine guidance to reviewing Elixir code (GenServer, ETS, memory, concurrency). The only minor inconsistency: SKILL.md instructs the agent to "Load and follow [review-verification-protocol](../review-verification-protocol/SKILL.md)" before reporting issues, but that referenced file is not included in the manifest. This may be a broken/relative link (documentation bug) but not an obvious security concern.
✓ 安装机制
No install spec or code files — instruction-only. Nothing is written to disk or downloaded by the skill itself.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. The guidance does not attempt to read or require unrelated secrets.
✓ 持久化与权限
always:false and default autonomous invocation are used (normal). The skill does not request persistent privileges or modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/3/21
elixir-performance-review v1.2.0 - Added quick-reference table linking common performance issues to documentation. - Expanded and clarified the review checklist for GenServer, memory usage, concurrency, and database patterns. - Documented valid code patterns that should not be flagged. - Introduced context-sensitive review rules to guide when to flag issues. - Added a step to verify findings using the review-verification-protocol before submission.
● 无害
安装命令 点击复制
官方npx clawhub@latest install elixir-performance-review
镜像加速npx clawhub@latest install elixir-performance-review --registry https://cn.clawhub-mirror.com
技能文档
Quick Reference
| Issue Type | Reference |
|---|---|
| Mailbox overflow, blocking calls | references/genserver-bottlenecks.md |
| When to use ETS, read/write concurrency | references/ets-patterns.md |
| Binary handling, large messages | references/memory.md |
| Task patterns, flow control | references/concurrency.md |
Review Checklist
GenServer
- [ ] 不 single-process bottleneck 对于 所有 requests
- [ ] 否 blocking operations 在...中 handle_call/cast
- [ ] Proper 超时 configuration
- [ ] Consider ETS 对于 读取-heavy state
Memory
- [ ] Large binaries 不 copied 之间 processes
- [ ] Streams used 对于 large data transformations
- [ ] 否 unbounded data accumulation
Concurrency
- [ ] Task.Supervisor 对于 dynamic tasks (不 raw Task.异步)
- [ ] 否 unbounded process spawning
- [ ] Proper backpressure 对于 消息 producers
数据库
- [ ] Preloading 到 avoid N+1 queries
- [ ] 分页 对于 large 结果 sets
- [ ] Indexes 对于 frequent queries
有效 Patterns (做 不 标志)
- Single GenServer 对于 low-throughput - 不 所有 state needs horizontal scaling
- Synchronous calls 对于 critical paths - Consistency 可能 require
- 在...中-memory state 没有 ETS - ETS 有 overhead 对于 small state
- Enum 在...上 Stream 对于 small collections - Stream overhead 不 worth
Context-Sensitive Rules
| Issue | Flag ONLY IF |
|---|---|
| GenServer bottleneck | Handles > 1000 req/sec OR blocking I/O in callbacks |
| Use streams | Processing > 10k items OR reading large files |
| Use ETS | Read:write ratio > 10:1 AND concurrent access |
之前 Submitting Findings
Load and follow review-verification-protocol before reporting any issue.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制