by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it claims (configure and troubleshoot golangci-lint). Before installing: review any remote install scripts (don't blindly run curl | sh), prefer verified release downloads or your OS/package manager when possible, verify checksums for the Go tarball if you extract to /usr/local, and be aware installing to /usr/local may require sudo. No credentials are requested by the skill. If you want lower-risk setup, use your CI's official setup actions (e.g., actions/setup-go)...详细分析 ▾
✓ 用途与能力
The skill's name/description (golangci-lint configuration and troubleshooting) matches its declared requirements (go and golangci-lint). The provided CI examples, config snippets, and troubleshooting steps align with that purpose and do not require unrelated capabilities.
ℹ 指令范围
Runtime instructions are focused on linting, configuration, and CI integration (golangci-lint run, go mod download, .golangci.yml suggestions). They also recommend using remote install scripts (curl | sh). The instructions do not request environment secrets or access other system credentials, but they do assume access to project files (go.mod/go.sum) and to write/install Go tooling.
ℹ 安装机制
Install steps use official hosts (golang.org and raw.githubusercontent.com for golangci-lint). However, both metadata and README recommend piping remote scripts into sh and extracting a tarball into /usr/local. While common, executing scripts directly from the network and extracting installers are moderate operational risks and should be audited before running.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths beyond the expected binaries. Nothing requests unrelated secrets or broad environment access.
ℹ 持久化与权限
The skill is not always-enabled and uses the platform default for invocation. Installation may write to /usr/local or the user's GOPATH and could require elevated privileges (sudo) depending on the chosen install method — this is normal for installing Go but worth noting.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/2
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install go-linter-configuration
镜像加速npx clawhub@latest install go-linter-configuration --registry https://cn.longxiaskill.com