📦 Hash Finder — 破译哈希
v1.0.0通过比对已知哈希库与常见明文，快速识别并破解哈希值，辅助安全审计与密码恢复。
0· 91·0 当前·0 累计
by 下载技能包
最后更新
2026/3/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill will likely send any hashes you provide to external servers (toolweb.in / api.mkkpro.com). Before installing or using it: 1) Do not submit real user passwords or unsalted password hashes — test only with non-sensitive examples. 2) Ask the publisher for the API server URL, authentication requirements, and a privacy/retention policy. 3) Verify the service reputation (toolweb.in / mkkpro domains) and whether an API key is required (the SKILL.md lists pricing but the skill declares no cre...详细分析 ▾
⚠ 用途与能力
The SKILL.md describes a network-backed hash-cracking API (references to api.mkkpro.com and toolweb.in) and pricing tiers, but the skill declares no required credentials or environment variables. If the skill actually calls a paid or authenticated external service, missing credentials is an inconsistency. No homepage or verifiable owner information is provided (source unknown).
⚠ 指令范围
The instructions and OpenAPI schema describe a /crack-hash endpoint and provide example requests/responses; they imply the agent will send supplied hashes to an external service. The SKILL.md does not document privacy, retention, or whether hashes are sent to third parties. Sending password hashes or other sensitive material to an external API without clear policy is a privacy/exfiltration risk.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files to be written to disk, which minimizes installation risk.
⚠ 凭证需求
No environment variables or credentials are declared even though the README mentions pricing and external service portals (portal.toolweb.in, hub.toolweb.in). Either the service is public/free (contradicted by pricing) or the skill omits required API keys — the omission is disproportionate and unexplained.
✓ 持久化与权限
The skill does not request always:true, does not declare system config paths, and is user-invocable only. It does not request elevated or persistent privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/21
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install hash-finder
镜像加速npx clawhub@latest install hash-finder --registry https://cn.longxiaskill.com