by 安全扫描
OpenClaw
安全
high confidenceThe skill's behavior (instruction-only coaching for INTP users) matches its name/description and it requests no credentials or installs; the main item to watch is that it instructs the agent to persist user conversation/‘user archive’ data (privacy/retention questions), and the repository URL in metadata looks unrelated.
评估建议
This skill is internally coherent for an INTP coaching assistant and doesn't ask for credentials or install code, but it repeatedly instructs the agent to save user conversations and action plans. Before installing, confirm where your agent stores 'memory' or user archives, how long they are retained, and who can access them. Also verify the author/repository if provenance matters (metadata repo URL looks unrelated). Avoid sharing highly sensitive personal or medical information with the skill; ...详细分析 ▾
✓ 用途与能力
Name/description (INTP coaching) aligns with SKILL.md and README functionality. The skill is instruction-only, requests no binaries, no env vars, and no external credentials — all proportionate to a conversational coaching skill. Minor metadata oddity: clawhub.json repository URL points to a seemingly unrelated repo (women-awakening-museum.git), which does not match the skill content but does not change runtime behavior.
ℹ 指令范围
SKILL.md contains detailed runtime instructions for two interaction modes (coach/advisor), turn-taking, output length limits, and explicit rules (e.g., don't replace professional therapy). It also instructs the agent to 'record key insights' and 'save user archives' for future sessions. The instructions do not reference any external endpoints, unrelated system files, or request additional credentials — but they do direct the agent to persist user conversation data (no storage location or retention policy specified), which raises a privacy/data-retention note.
✓ 安装机制
No install spec and no code files to execute; instruction-only skills are lowest install risk. README mentions a 'clawhub install' command but there is no install script bundled — consistent with an instruction-only skill.
✓ 凭证需求
Skill declares no required environment variables, no primary credential, and uses no system config paths. There are no requests for unrelated credentials or secrets.
ℹ 持久化与权限
always:false and model invocation is normal. However, the SKILL.md repeatedly instructs storing user profiles, action plans, and execution results for future sessions. That persistent storage is functionally plausible for a coaching skill, but the instructions do not specify where/how data is stored, retention policy, or how to delete data — this is a privacy/operational detail the installer should verify in their agent platform.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.5.02026/4/17
INTP Coach v1.5.0 — 更系统、清晰的 INTP 教练/顾问成长方案 - 全面重构文档结构与流程，明确教练与顾问双模式及自动切换条件 - 明确细化边缘场景与对话话术模板（用户类型、情绪模糊、功能测试等） - 强化提问与建议边界，强调输出长度与内容分段规范 - 增加核心功能、常见错误、故障排查和成功指标指引 - 新增成长记录（用户档案）机制，便于追踪行动和调整策略 - 完善对话结束与存档流程，提升用户体验
● Pending
安装命令
点击复制官方npx clawhub@latest install intp-coach
镜像加速npx clawhub@latest install intp-coach --registry https://cn.longxiaskill.com镜像同步中
技能文档
未提供SKILL.md文档内容，无法翻译