by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This package contains two benign-looking Python scripts that handle local batch tracking and ratio calculations and will read/write kefir_batches.json in the working directory. However, SKILL.md promises extra features (reminders, grain health scripts, image assets, and a learning component) that are missing from the manifest — the package appears incomplete. Before installing or enabling: 1) ask the author for the missing files (reminder_scheduler.py, grain_health.py, images/templates) or an up...详细分析 ▾
⚠ 用途与能力
Name/description match the included scripts' primary functions (batch tracking and ratio calculation). However SKILL.md advertises additional capabilities (reminder_scheduler.py, grain_health.py, learning/adaptive behavior, visual guides, recipe_templates) that are not present in the file manifest. That mismatch is disproportionate to the declared deliverables.
⚠ 指令范围
Runtime instructions mention scheduling reminders, photo documentation, grain health diagnostics and learning from environment. The provided scripts implement basic local batch tracking and ratio calculations only; there is no scheduler, no learning component, and no image handling code. The instructions also reference files/assets that are not present. The mismatch means the agent could be instructed to perform actions the code cannot implement.
✓ 安装机制
No install spec (instruction-only with packaged scripts). Nothing is downloaded or executed automatically during install; code is static and included in the package. This is a low-risk installation mechanism.
✓ 凭证需求
The skill requests no environment variables, no credentials, and does not reference system config paths. The included scripts read/write a local kefir_batches.json in the working directory only, which is proportionate to the stated purpose.
✓ 持久化与权限
always:false and normal model invocation settings. The skill stores batch history to kefir_batches.json in the current directory (local persistence), which is reasonable for a tracker and does not request elevated system privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/23
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install kefir-batch-manager
镜像加速npx clawhub@latest install kefir-batch-manager --registry https://cn.longxiaskill.com镜像同步中