by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requirements match its stated purpose (reverse geocoding via geocode.com.cn) and request no unexplained credentials or system access.
评估建议
This skill appears to do exactly what it says: small bash script that issues GET requests to https://geocode.com.cn/ to reverse-geocode coordinates. Before installing, note that (1) the script makes outbound HTTPS requests to the provider — don't pass sensitive coordinates you don't want sent to that service, (2) GEOCODE_BASE_URL can be set to point to another host (use only trusted endpoints), and (3) respect the provider's usage guidance (no bulk/batched high-volume lookups). No secrets or bro...详细分析 ▾
✓ 用途与能力
Name/description are consistent with the included script and SKILL.md. The only required binary is curl (declared), and optional env vars (GEOCODE_BASE_URL, GEOCODE_USER_AGENT) are directly relevant to choosing the endpoint and user-agent.
✓ 指令范围
SKILL.md and scripts instruct only to call the provider's root or reverse endpoint and to assemble a short response. The script does not read unrelated files, does not attempt to access other credentials, and does not transmit data to unexpected endpoints by default. Note: the user-configurable GEOCODE_BASE_URL means a user (or operator) could point requests at a different host, which would then receive coordinates — this is expected behavior but worth being aware of.
✓ 安装机制
No install spec; this is an instruction-only skill with one small bash script bundled. Nothing is downloaded or extracted at install time.
✓ 凭证需求
The skill requires no credentials and only optionally honors GEOCODE_BASE_URL and GEOCODE_USER_AGENT. The requested environment access is minimal and proportional to the stated function.
✓ 持久化与权限
The skill is user-invocable, not always-enabled, and does not request persistent or elevated privileges or modify other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.42026/3/14
- Root API hint response now describes a five-field display format (previously six fields). - Chinese and English field labels are included in the hint response for improved clarity. - Response mapping updated: now structured as [Country, admin1, admin2, county, name]. - Documentation reflects these API updates and clarifies which fields may be empty, especially for remote or ambiguous locations. - No code changes; this update is documentation only.
● 无害
安装命令
点击复制官方npx clawhub@latest install geocode
镜像加速npx clawhub@latest install geocode --registry https://cn.longxiaskill.com