by 安全扫描
OpenClaw
安全
high confidenceThe skill's files, declared requirements, and runtime instructions are coherent with its stated purpose (planning hike itineraries); nothing requests unrelated credentials or installs, though guidance about real‑time checks is vague and could cause outbound network lookups during use.
评估建议
This skill appears to be what it says: an instruction-only hike planner that uses the included local template. It's low-risk because it doesn't install code or request credentials. Things to consider before installing: (1) the skill asks the agent to "verify" real-time facts (weather, trail closures, transit) but doesn't declare how — expect the agent to perform web lookups or require API keys if you need authoritative data; (2) if you do not want the agent making outbound requests, clarify in p...详细分析 ▾
✓ 用途与能力
Name, description, and included files (SKILL.md + local plan template) align: the skill is instruction-only and intended to produce formatted hike plans. It does not declare unrelated binaries, env vars, or installs.
ℹ 指令范围
Instructions stay within the planner scope (read local template, gather constraints, produce route/risks/gear/costs). They explicitly forbid automatic template changes and require clarifying missing inputs. However, the workflow mandates verifying real‑time facts (weather, trail closures, transit schedules) but does not specify data sources or how to fetch them — this is vague and may lead the agent to perform web requests or call external APIs at runtime.
✓ 安装机制
No install spec and no code files beyond docs; nothing will be downloaded or executed on install. This minimizes installer-related risk.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths, which is proportionate for an instruction-only planner. One caveat: because it asks to verify live data (weather, transport), users who want authoritative external checks may need to supply API keys or grant network access — these are not declared by the skill.
✓ 持久化与权限
always is false and the skill does not request persistent/system-level privileges. The template is local and only updated when the user explicitly asks, so no covert modification of other skills or system settings is apparent.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/23
- Initial release of hike-route-planner skill. - Generates complete, actionable hiking plans and leader-ready route briefs for various types of hikes. - Follows a strict, local plan template for consistent, structured outputs. - Incorporates robust input checks, clarifies “assumed” or “estimated” information, and prioritizes safety. - Output includes route segments, timing, transport, bailout options, risk notes, gear/cost breakdown, and detailed organizational guidance.
● 无害
安装命令
点击复制官方npx clawhub@latest install hike-route-planner
镜像加速npx clawhub@latest install hike-route-planner --registry https://cn.longxiaskill.com