by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and low-risk: it only generates CSS and writes it to a local file. Before installing/using it, (1) confirm you are comfortable with the agent writing files to your current directory and inspect the generated theme.css before uploading to WeChat; (2) be aware data URIs or embedded Base64 images can make files large — verify any external HTTPS resources are trustworthy; (3) the skill references a 'wenyan-cli' and another skill for applying themes — those are not include...详细分析 ▾
✓ 用途与能力
Name/description match the runtime instructions: the SKILL.md describes generating WeChat-specific CSS and saving it locally. Nothing requested (no env vars, binaries, or installs) is disproportionate to that purpose.
ℹ 指令范围
Instructions are narrowly scoped to: parse user intent, generate CSS constrained to the '#wenyan' namespace, and save a local file (e.g., theme.css). This is appropriate, but the agent will write files to the current directory — users should expect that and inspect outputs. The doc references another skill ('apply-wechat-custom-theme') but does not require any cross-skill credentials.
✓ 安装机制
No install spec or code is present (instruction-only). That minimizes install-time risk; nothing is downloaded or written by an installer.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. All required capabilities (generate CSS, save file) are possible without secrets, so the lack of requested credentials is proportionate.
✓ 持久化与权限
always is false and disable-model-invocation is default; the skill does not request elevated or persistent privileges and does not modify other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/8
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install generate-wenyan-theme
镜像加速npx clawhub@latest install generate-wenyan-theme --registry https://cn.longxiaskill.com