📦 China Legal Compliance AI — 法律合规助手
v1.0.0集成50个自动化技能，一键完成合同审查、劳动合规、知识产权与数据保护等中国企业常见法律场景，降低合规成本。
0· 260·2 当前·2 累计
by 下载技能包
最后更新
2026/3/26
安全扫描
OpenClaw
安全
medium confidenceThe skill bundle's code, files, and runtime instructions are internally consistent with a China-focused legal/compliance automation package and do not request unrelated privileges, but the package comes from an unknown origin and references an optional third‑party API that could change its data flow.
评估建议
This bundle appears to implement what it advertises and runs primarily with local Python scripts, but note the package has an unknown source (no homepage) and claims an external 'DeepSeek API Key' option. Before installing: 1) Review the included config/legal-config.yaml.template and any omitted files for sensitive data sinks; 2) Do not enable or populate external API keys (DeepSeek or similar) until you verify the endpoint and privacy policy; 3) Run the package in an isolated/test environment f...详细分析 ▾
✓ 用途与能力
The 50 included Python scripts implement the contract, labor, IP, data, and enterprise-compliance features described in SKILL.md and README (contract review, extraction, templates, audits, risk matrices, etc.). No obvious requests (env vars, binaries, system paths) are disproportionate to the stated purpose.
ℹ 指令范围
SKILL.md gives reasonable local usage instructions (install via clawhub, copy a config template, run specific skills). It also mentions an optional 'DeepSeek API Key' for advanced legal QA; the core instructions and many scripts operate locally, but enabling an optional external API would transmit queries externally — that behavior is optional but not fully documented in requires.env (i.e., optional external endpoints are not declared).
✓ 安装机制
There is no install spec and the package is instruction-plus-script based; the files are plain Python scripts (no network download/install steps shown). This is lower-risk from an automatic install perspective, though manual installation via clawhub/openclaw may execute scripts on the host.
ℹ 凭证需求
The skill declares no required environment variables or credentials, which matches the largely local processing scripts. However SKILL.md advertises an optional third‑party DeepSeek API key (not declared as required) and asks users to populate a config/legal-config.yaml — that config may contain enterprise data. The optional API and config file are the main vectors that could expose sensitive data if enabled or misconfigured.
✓ 持久化与权限
The package does not request always:true or other elevated persistent privileges; it is user-invocable and can be run interactively. Nothing in the manifest indicates modification of other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
Initial release: 50 legal compliance skills covering contracts, labor, IP, data privacy, and corporate compliance
● 无害
安装命令
点击复制官方npx clawhub@latest install legal-compliance-bundle
镜像加速npx clawhub@latest install legal-compliance-bundle --registry https://cn.longxiaskill.com