by 安全扫描
OpenClaw
安全
high confidenceThe skill's files, instructions, and dependencies are consistent with a digital-solution/architecture-design assistant — nothing requests unrelated credentials or suspicious installs, though it expects Graphviz rendering capability and may read DOT files or perform web searches for context.
评估建议
This skill appears coherent and focused on producing digital-solution documents and architecture diagrams. Before installing: 1) Ensure Graphviz rendering is available on your system (install system Graphviz 'dot' command plus the Python 'graphviz' package) because the script will try to render DOT to PNG/SVG/PDF. 2) Be aware the agent is instructed to ask the user to confirm the scheme type before proceeding and may perform internet searches when the user cannot provide needed context — avoid p...详细分析 ▾
✓ 用途与能力
Name/description (digital solution design) matches the provided content: structured design process, references, templates, and a small script to render Graphviz DOT diagrams. The included reference docs, templates, and the diagram script are proportionate to the stated purpose.
ℹ 指令范围
SKILL.md limits scope (forces explicit scheme-type confirmation before producing outputs) and documents concrete steps for each phase. It instructs the agent to generate diagrams using the included script and to consult references. It also allows the agent to 'search the internet' for common scenario information when the user cannot provide details — this is reasonable for a design skill but means the agent may perform external queries. The script reads local DOT files or stdin to render diagrams, which is expected behavior for this feature.
ℹ 安装机制
This is instruction-only (no install spec), so nothing is automatically downloaded. SKILL.md and README recommend 'pip install graphviz' (python package). However, the skill does not declare a required system binary: the python 'graphviz' package typically requires the Graphviz system tool (dot) to be present to render outputs. There is a minor mismatch between 'required binaries: none' and the practical need for the Graphviz engine; otherwise there are no download URLs or high-risk installers.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config path access. The reference docs and script do not attempt to read secrets or external credentials. Requested access (reading DOT files / stdin for diagram generation) is proportionate to the stated purpose.
✓ 持久化与权限
Flags: always=false, user-invocable=true, disable-model-invocation=false (normal). The skill does not request permanent presence or elevated privileges and does not modify other skills or global agent configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.22026/4/20
- All reference and documentation files moved from `Reference/` and `Skill.md` to lowercase-named `references/` and `SKILL.md` for improved consistency. - Added a script (`scripts/generate-architecture-diagram.py`) to automate architecture diagram generation. - Resource index and references within documentation updated to reflect the new file paths. - No major logic or workflow changes; this version focuses on file organization and tooling support.
● 无害
安装命令
点击复制官方npx clawhub@latest install digital-solution-designer
镜像加速npx clawhub@latest install digital-solution-designer --registry https://cn.longxiaskill.com镜像同步中