by 安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only, high-level playbook for designing/verifying API contracts; it contains no installs, no credential requests, and its instructions are consistent with the stated purpose.
评估建议
This skill is a reusable checklist/playbook for API contract work and appears internally consistent. It will not install software or ask for credentials. Keep in mind: (1) it is purely advisory — it won't run tests or change systems by itself; if you ask the agent to actually execute commands or integrate with CI/CD, ensure those actions are gated and do not expose secrets; (2) the instructions are intentionally high-level, so confirm any concrete test commands or scripts before running them in ...详细分析 ▾
✓ 用途与能力
The name and description (API contract design and verification) match the SKILL.md content: a playbook, quality gates, and output format. The skill requests no binaries, env vars, or config paths, which is proportionate for a planning/checklist skill.
ℹ 指令范围
The instructions are high-level and focused on planning, checkpoints, evidence collection, and producing implementation-ready outputs. They do not direct the agent to read system files, access credentials, or transmit data externally. One ambiguity: steps like 'Execute in checkpoints' and 'Exact checklist or commands where useful' could be interpreted by an agent as permission to run tests/commands if the agent has other capabilities; the SKILL.md itself does not provide or require such capabilities.
✓ 安装机制
Instruction-only skill with no install spec and no code files; nothing is written to disk and no external packages are requested.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths. There is no unexplained request for secrets or access to unrelated services.
✓ 持久化与权限
The skill does not request persistent presence (always:false) and uses default invocation settings. It does not modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/18
Initial release
● 无害
安装命令
点击复制官方npx clawhub@latest install jarvis-api-contract-guard-01
镜像加速npx clawhub@latest install jarvis-api-contract-guard-01 --registry https://cn.longxiaskill.com