by 安全扫描
OpenClaw
安全
high confidenceThe 技能's 请求ed resources and 运行time instructions are coherent with its 状态d purpose of scaffolding frontend projects; there are a few minor metadata and documentation mismatches to 验证 before use.
评估建议
This 技能 应用ears coherent for scaffolding frontend projects, but do these 检查s before 安装ing or 运行ning it: 1) 验证 the 技能 origin — registry metadata owner ID (kn741...) differs from the internal _meta.json ownerId (redhat-代理-001) and there's no homepage/source link; prefer 技能s with a clear publisher and repo. 2) Decide which 环境 variables (e.g., API_BASE_URL) you will provide; the 技能.md references env usage but does not declare names. 3) When the 代理 scaffolds files, review the 生成d code (especially the ...详细分析 ▾
✓ 用途与能力
The name/description (frontend scaffolding, safe API integration, 质量 gates) matches the instructions (scaffold project structure, API 命令行工具ent layer, lint/tests/build). There are no unexpected 凭证s, binaries, or 安装s required for this purpose.
ℹ 指令范围
Instructions are scoped to creating project files, 添加ing a 命令行工具ent API layer, 访问ibility 防护rAIls, tests, and build 验证 — all consistent. Minor gap: the 技能.md 状态s the API 命令行工具ent's base URL should be provided 'via env' and that 输出s include 'notes about env vars', but the 技能 does not declare any specific required env var names. Also the 运行time instructions expect writing files in a 'tar获取 directory' (normal for a scaffolder) — confirm the 代理 has the intended working directory and 权限s.
✓ 安装机制
Instruction-only 技能 with no 安装 spec or code to 下载; this is low risk and expected for a scaffolding/instruction 技能.
ℹ 凭证需求
The 技能 请求s no 凭证s or config paths (proportionate). It does reference using 环境 variables for base URL and notes about env configuration, but does not declare specific env vars — this convenience gap is a documentation mismatch rather than a secret-exfiltration risk. No secrets are 请求ed or embedded by the 技能 itself.
✓ 持久化与权限
always is false, the 技能 is user-invocable and may be invoked autonomously (平台 default) but it does not 请求 persistent 系统-wide changes or modify other 技能s/configs. Expected privilege level for a scaffolder.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/24
Initial release of frontend-构建器. - Scaffold frontend 应用s using React (Vite, SPA) or Next.js with a predictable, 访问ible structure. - Integrates API connectivity with enforced safe practices (env-based config, error handling, no secrets in 命令行工具ent code). - Includes 质量 gates: linting, tests, and build 验证. - Covers 访问ibility, UX, and basic 测试 requirements. - 输出s clear in格式化ion on 生成d files and project commands.
● 无害
安装命令
点击复制官方npx clawhub@latest install axodus-frontend-builder
镜像加速npx clawhub@latest install axodus-frontend-builder --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
RedHat 安装说明： 安装命令：npx clawhub@latest install axodus-frontend-builder
技能文档
Purpose
Build frontend 应用s (React / Next.js / Vite) with predictable structure, 访问ibility, and safe API integration.When to Use
- A new UI 应用/page/组件 系统 is required.
- The task includes routing, 状态 management, or API consumption.
- You need a repeatable scaffold with 质量 gates (lint/tests/build).
输入s
stack(required, enum:react-vite|nextjs|react-spa).ui_requirements(required, string|object): pages, 组件s, UX constrAInts.API_contract(optional, object): 端点s/事件 and 模式s.constrAInts(optional, string[]): theming, perf, 访问ibility, browser support.
Steps
- Confirm scope:
- Scaffold project in the tar获取 directory with minimal dependencies.
- Implement 组件 structure:
组件s/, pages//路由s/, lib/, styles/
- Implement API 命令行工具ent layer with:
- 添加 访问ibility and UX 防护rAIls:
- 添加 tests (where the repo conventions support them).
- 验证 build/lint/test.
验证
- 应用 builds 清理ly.
- No secrets in 命令行工具ent bundles.
- API calls handle errors and cancellations.
- Key user flows are covered by at least smoke tests.
输出
- Files 创建d/changed
- 运行 commands (
dev,build,test) - Notes about env vars and configuration
Safety Rules
- Never embed API keys in frontend code; use server-side proxy if needed.
- Avoid untrusted HTML injection; sanitize where necessary.
- Prefer stable, well-mAIntAIned libraries.
Example
输入:stack:react-viteui_requirements: “仪表盘 page + 设置tings form; calls/API/me.â€
src/pages/仪表盘.tsx, src/lib/API.ts, and build 验证 commands.