by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally coherent and low-risk: the parser is a simple local Python script (reads stdin/args, uses regex) and the documentation matches the code. Before installing, consider: 1) If you will paste proprietary JD text, be aware that any agent or tooling with outbound network access could send that data externally — the skill itself does not perform network I/O, but your agent might. 2) Review the included scripts yourself (jd-parser.py is short and readable) if you have doubts...详细分析 ▾
✓ 用途与能力
Name/description (JD 转译) match the provided artifacts: SKILL.md, README, examples, and a small helper script (scripts/jd-parser.py). The files and helper script are proportional to the stated goal and no unrelated credentials, binaries, or config paths are requested.
ℹ 指令范围
SKILL.md stays within the stated purpose (parse JD, build problem tree, generate interview strategy). It suggests augmenting analysis with company/industry info (financials, news, product dynamics) but does not embed or require any network endpoints or instructions to read system files. This is reasonable, but leaves discretion to the agent to retrieve external information — a user should be aware that agent/web access for company research could involve network requests outside the skill itself.
✓ 安装机制
No install spec is present (instruction-only skill). The only code file is a small Python script included in the package; it is not downloaded from external URLs and nothing is written to disk beyond standard extraction of the skill package.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config paths. The included script reads stdin or argv only and contains no access to environment secrets. The requested runtime scope is minimal and appropriate for the described functionality.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent or elevated privileges, nor does it modify other skills or global agent configuration. Autonomous model invocation is allowed (platform default) but not combined with other concerning factors.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/30
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install jd-translator
镜像加速npx clawhub@latest install jd-translator --registry https://cn.longxiaskill.com