by 安全扫描
OpenClaw
安全
high confidenceThe skill's files and runtime instructions line up with its stated purpose (web research); nothing requested or installed is disproportionate, though the declared use of an 'exec' tool is worth mindful review since it can run arbitrary commands.
评估建议
This skill appears coherent for web research: it uses web_search and web_fetch to gather sources and write to workspace/research/. Before installing, confirm you trust the skill author (source is unknown). Pay attention to the 'exec' tool requirement — it allows running shell commands (often used to run the included script) and could be misused to run arbitrary commands. If you install, review scripts/research.py yourself and ensure the agent's runtime sandbox and workspace permissions are accep...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, and included files (search strategies, synthesis framework, report template, and a small driver script) consistently implement a web research pipeline. Required tools (web_search, web_fetch, write) match the described functionality.
ℹ 指令范围
SKILL.md confines actions to searching, fetching, synthesizing, and writing reports to workspace/research/. This is appropriate. It also lists the 'exec' tool for running the pipeline; while plausible (to run scripts), exec grants shell execution capability and therefore increases risk if misused — the SKILL.md does not provide broad discretionary steps, but any use of exec should be audited.
✓ 安装机制
No install spec (instruction-only) and a small included script; nothing is downloaded or written at install time. Lowest-risk install footprint.
✓ 凭证需求
Skill requests no environment variables, no credentials, and no config paths. The required tools are proportional to a web research workflow.
✓ 持久化与权限
always is false and the skill is user-invocable. It does not request permanent presence or modify other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release of the claw-web-research skill. - Automates structured web research with source-cited reports. - Supports freelance research, competitive and market analysis, technical deep-dives, and fact-checking. - Workflow includes question parsing, web searching, content fetching, synthesis, citation, and storage. - Enforces quality guidelines: source cross-checking, citation, flagging outdated info, and distinguishing opinion from data. - Requires web_search, web_fetch, write, and exec tools. - Outputs reports in standardized Markdown format with executive summary, findings, citations, and limitations.
● 无害
安装命令
点击复制官方npx clawhub@latest install claw-web-research
镜像加速npx clawhub@latest install claw-web-research --registry https://cn.longxiaskill.com