by 安全扫描
OpenClaw
安全
high confidenceThis is a read-only, instruction-only informational skill about Johnson & Johnson that requests no credentials, no installs, and contains only static content — it is internally consistent with its stated purpose.
评估建议
This skill appears to be a static informational snippet about Johnson & Johnson and poses no obvious security risk because it requires no credentials or installs. Note that the source/homepage is 'unknown' — if you will rely on this for important decisions, verify facts against official or authoritative sources. Otherwise it is safe to install/use for read-only informational purposes.详细分析 ▾
✓ 用途与能力
Name and description match the SKILL.md content (company summary/history). The skill requests no binaries, env vars, or config paths, which is appropriate for a read-only informational skill.
✓ 指令范围
SKILL.md contains only static descriptive content and a simple 'read_when' trigger list. It does not instruct the agent to read files, access environment variables, call external endpoints, or perform other actions outside the stated purpose.
✓ 安装机制
No install spec and no code files are present (instruction-only), which is the lowest-risk posture — nothing is written to disk or fetched at install time.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths, which is proportionate to an informational/company-profile skill.
✓ 持久化与权限
always is false and autonomous invocation is allowed (platform default). The skill does not request elevated persistence or modify other skills/settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install johnson-and-johnson
镜像加速npx clawhub@latest install johnson-and-johnson --registry https://cn.longxiaskill.com