by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions, lack of installs, and absence of requested credentials align with its stated purpose of creating and updating project documentation.
评估建议
This skill appears coherent for managing repository docs. Before using it: run with --dry-run to preview changes, ensure source-controlled backups or create manual backups (it suggests cp AGENTS.md.backup), and review diffs before committing. Pay attention to the migration command (mv CLAUDE.md AGENTS.md && ln -sf ...) — if AGENTS.md already exists you could overwrite content. Avoid enabling any automatic commit/push behavior; manually review and commit changes. If you want extra safety, run the...详细分析 ▾
✓ 用途与能力
Name/description (manage CLAUDE.md / AGENTS.md / README.md / CONTRIBUTING.md) aligns with the actual content: the SKILL.md describes reading repo config files, verifying commands/paths, and updating or creating documentation. It does not request unrelated binaries, credentials, or config paths.
ℹ 指令范围
The runtime instructions tell the agent to read repository files and run shell commands (ls, cat, grep, cp, mv, ln) to verify and modify docs. This is within scope for a documentation-management skill, but it does include destructive/modify actions (mv, ln, cp overwrites) so users should verify diffs and backups before applying changes.
✓ 安装机制
No install spec and no code files — instruction-only. Nothing is downloaded or written by an installer, which minimizes supply-chain risk.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config paths. The instructions reference common repo files (package.json, pyproject.toml, lock files) which are appropriate and proportional to the documented purpose.
✓ 持久化与权限
Flags show always: false and normal autonomous invocation allowed. The skill writes/edits repository documentation and creates symlinks (expected behavior) but does not request persistent system privileges or modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.56.12026/4/6
v2.56.1
● 无害
安装命令
点击复制官方npx clawhub@latest install compound-eng-md-docs
镜像加速npx clawhub@latest install compound-eng-md-docs --registry https://cn.longxiaskill.com