by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only onboarding guide whose requirements and instructions match its stated purpose and request no credentials, installs, or unusual privileges.
评估建议
This skill is instruction-only and appears coherent with its stated goal: it guides a developer through onboarding stages and requests no credentials or installs. It's low-risk to add, but note it is high-level: it presumes the agent or platform will store/track progress (no storage mechanism is specified). If you see a future version that adds an install step, requests environment variables, or instructs the agent to read files or send data to external endpoints, re-evaluate before enabling it.详细分析 ▾
✓ 用途与能力
Name/description describe a guided onboarding flow and the SKILL.md contains only staging and step-by-step onboarding instructions. No unrelated binaries, env vars, or config paths are requested.
ℹ 指令范围
Instructions are limited to presenting stages, challenges, hints, and progress tracking. The doc mentions actions like 'Load onboarding progress' and 'Track mastery' but does not specify reading system files, env vars, or external endpoints; this implies use of agent-internal state rather than accessing external secrets. The wording is slightly high-level/vague about where progress is stored, but not incoherent with its purpose.
✓ 安装机制
No install spec and no code files — instruction-only skill. No downloads, package installs, or filesystem writes are declared.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths; nothing in the instructions requests secrets or external service access.
✓ 持久化与权限
always is false and the skill does not request persistent system presence or modify other skills' configuration. Autonomous invocation is allowed (platform default) but is not combined with broad privileges here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
- Initial release of "onboard" skill for guided developer onboarding. - Supports a structured five-stage path: big picture, core domain, interfaces, patterns, and hardening. - Tracks onboarding progress, mastery (correct twice), and advancement (80%+ over 10+ challenges). - Provides hints on first attempt and summarizes stage progress. - Includes graduation step, transitioning to the regular gauntlet with answer history retained.
● 无害
安装命令
点击复制官方npx clawhub@latest install nm-gauntlet-onboard
镜像加速npx clawhub@latest install nm-gauntlet-onboard --registry https://cn.longxiaskill.com
技能文档
Night Market Skill — ported from claude-night-market/gauntlet. For the full experience with agents, hooks, and commands, install the Claude Code plugin.
# Guided Onboarding
Walk a new developer through the codebase in structured stages.
Stages
| Stage | Focus | Categories | Difficulty |
|---|---|---|---|
| 1 | Big picture | architecture, data_flow | 1-2 |
| 2 | Core domain | business_logic | 2-3 |
| 3 | Interfaces | api_contract, data_flow | 3 |
| 4 | Patterns | pattern, dependency | 3-4 |
| 5 | Hardening | error_handling, business_logic | 4-5 |
Steps
- Load onboarding progress
- Show current stage and progress summary
- Present 5 challenges from current stage
- Enable hints on first attempt
- Track mastery (correct twice = mastered)
- Check advancement (80% across 10+ challenges)
- Report progress
Graduation
After stage 5, the developer enters the regular gauntlet. Answer history carries over.