by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This appears to be a straightforward local GeoJSON coordinate converter. Before installing/running: (1) ensure you install pyproj from a trusted source (pip) in a controlled environment, (2) run the script on sample/test files first to confirm output, and (3) review/scan the included script if you require stricter assurance. There are no network calls or credential requests in the code, so risks are limited to running arbitrary local Python code from an untrusted source—treat the repository orig...详细分析 ▾
✓ 用途与能力
Name/description match the included script and SKILL.md. The requested dependencies (pyproj) and CLI behavior are appropriate for GeoJSON coordinate transforms; there are no unrelated binaries, env vars, or surprising permissions.
✓ 指令范围
SKILL.md only instructs running the included script and installing pyproj. The runtime instructions operate on local GeoJSON files and do not request unrelated files, environment variables, or network endpoints.
✓ 安装机制
No install spec is provided (instruction-only). The README suggests installing pyproj via pip, which is standard; there are no downloads from unknown URLs or archive extraction steps.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths. The code does not access secrets or external services—only local file I/O and pyproj transforms.
✓ 持久化与权限
always is false and the skill does not modify agent/system configuration or other skills. It only reads an input file and writes an output file if requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/11
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install gis-transform-coords
镜像加速npx clawhub@latest install gis-transform-coords --registry https://cn.longxiaskill.com