by 安全扫描
OpenClaw
安全
high confidenceThis is a static, informational IBM company guide that requests no permissions, installs, or credentials and is internally consistent with its stated purpose.
评估建议
This skill is a simple, read-only IBM overview and appears low-risk. Before installing, you may want to: verify the publisher/owner or prefer a skill with a visible homepage for provenance; confirm future updates don't add install steps, downloads, or environment-variable requirements; and note the SKILL.md version mismatch (1.0.0) vs registry version (1.0.2) — a minor metadata issue but not a security problem by itself.详细分析 ▾
ℹ 用途与能力
The name and description match the SKILL.md content: a company introduction and technology services guide for IBM. The skill declares no binaries, env vars, or installs, which is proportionate for a read-only informational skill. Minor metadata mismatch: SKILL.md lists version 1.0.0 while the registry shows 1.0.2, and the package has no homepage listed and an opaque owner ID — these are provenance/metadata notes but do not affect functionality.
✓ 指令范围
SKILL.md contains only static descriptive text and links to IBM's official sites. There are no runtime instructions to read files, call external endpoints other than linking to IBM, access environment variables, or perform system operations.
✓ 安装机制
No install spec and no code files are present (instruction-only). Nothing is written to disk or downloaded during install.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths — proportional for an informational skill.
✓ 持久化与权限
always is false (default). The skill is user-invocable and allows model invocation (normal for skills). It does not request permanent presence or modify other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install ibm
镜像加速npx clawhub@latest install ibm --registry https://cn.longxiaskill.com镜像同步中