by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill reads like an architectural manifesto rather than an actionable integration. Before installing or enabling it, ask the author for concrete details: which court docket APIs and endpoints will be used, what credentials are required (and why), what data sources will be ingested, and what precise actions the agent may perform autonomously. Do not provide broad credentials or sensitive document access until you have a version that lists explicit env vars, required endpoints, and a minimal ...详细分析 ▾
⚠ 用途与能力
Name/description promise: end-to-end autonomous litigation (automated filing, discovery ingestion, ZK proofs, jurisdiction routing). Reality: instruction-only SKILL.md with high-level architecture but no concrete requirements (no API endpoints, no required credentials, no data sources). A capability that needs court docket APIs, evidence stores, or ZK tooling would normally declare credentials, endpoints, or install steps; this skill declares none, which is incoherent.
⚠ 指令范围
The SKILL.md is abstract and grants broad, open-ended authority (mass 'recursive ingestion of millions of artifacts', 'automated filing via API-integrated court dockets') but does not specify which files, paths, or network endpoints to use, nor any constraints or approvals. Vague instructions like this can lead an agent to over-collect data or attempt network actions without clear limits.
✓ 安装机制
No install spec and no code files — lowest install risk. Nothing will be automatically downloaded or written to disk by the skill as provided.
⚠ 凭证需求
The skill declares no required environment variables or credentials, yet its functionality (API-integrated filing, discovery ingestion, ZK-proofing) would realistically require access tokens, service endpoints, storage, and possibly privileged data. The absence of declared credentials is disproportionate and unexplained.
ℹ 持久化与权限
always:false (normal) and model invocation is allowed (default). Autonomous invocation is the platform default; by itself this is not a red flag, but combined with the skill's vague authority to perform filings and massive ingestion it raises the potential blast radius if later coupled with credentials or implementation changes.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/9
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install lawsuit
镜像加速npx clawhub@latest install lawsuit --registry https://cn.longxiaskill.com