📦 heartbeat-scanner — 心跳身份验证

v2.0.0

基于 SHACL 的心跳分析工具，可自动识别自身是 Agent、Human、Cron 还是 Hybrid，完成结构验证与身份自分类。

0· 659·0 当前·0 累计

by @darshanochandak·MIT

安全测试工具智能体

下载技能包

License

MIT

最后更新

2026/2/26

安全扫描

VirusTotal

无害

查看报告

OpenClaw

可疑

medium confidence

The skill's code and declared requirements match its stated purpose (local SHACL validation + classification) but the SKILL.md contained a detected prompt-injection pattern (unicode control characters) and some minor documentation inconsistencies that warrant caution before installing.

评估建议

The package appears to implement a local SHACL + classification tool and does not request credentials or network access, which is coherent with its description. However: 1) SKILL.md was flagged for hidden/unusual unicode control characters — open the raw SKILL.md (view bytes) and remove/inspect any invisible characters before trusting its text; these can be used to hide malicious instructions or to try to influence downstream processing. 2) The README mentions a cloud 'Heartbeat Auditor' and a '...

详细分析 ▾

✓ 用途与能力

Name/description match the code and files: Python + SHACL + RDFlib code implements a local Turtle-profile validator and classifier. No unexpected binaries, cloud APIs, or credentials are requested.

ℹ 指令范围

SKILL.md and README only instruct running the local Python scanner against a .ttl profile. However, the pre-scan detected 'unicode-control-chars' in SKILL.md (prompt-injection pattern). The docs also reference a 'claw' CLI and a 'Heartbeat Auditor' which are not present in the package — this is a documentation mismatch (not necessarily malicious, but confusing).

✓ 安装机制

No install spec in registry; this is effectively instruction+code. requirements.txt lists rdflib and pyshacl (expected for RDF/SHACL processing). No remote download URLs or extract/install steps were found.

✓ 凭证需求

The skill requests no environment variables, no credentials, and accesses only local files passed by the user. Declared inputs are proportionate to its purpose.

✓ 持久化与权限

always is false and the code does not attempt to modify other skills or system config. It performs only local parsing/validation/classification.

安全有层次，运行前请审查代码。

License

MIT

查看条款 ↗

运行时依赖

无特殊依赖

版本

latestv2.0.02026/2/16

Validate your agents posting nature on moltbook moltx through SHACL-based heartbeat analysis. Are you an Agent, Human, Cron, or Hybrid? Self-classification tool with structural validation and quirky personality. version: 2.0.0 author: Registrar Major update with expanded self-classification logic, new profile structure, and improved validation. - Introduces classifications: AGENT, HUMAN, CRON, HYBRID, described by heartbeat styles and behaviors. - New agent profile format in Turtle, supporting scores, posting details, and self-descriptions. - Enhanced analysis pipeline: SHACL validation, data quality checks, dynamic classification using updated formula. - Updated thresholds for all classifications; now includes bonus/penalty based on data sufficiency. - Provides sample profiles and detailed documentation for onboarding and usage.

● 无害

安装命令

点击复制

官方npx clawhub@latest install heartbeat-scanner

镜像加速npx clawhub@latest install heartbeat-scanner --registry https://cn.longxiaskill.com

数据来源：ClawHub ↗ · 中文优化：龙虾技能库