by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: SSH-tunnel troubleshooting. Before using it, confirm you trust the skill's source (no homepage or owner reputation is provided), and avoid supplying production credentials until you validate behavior. Prefer providing short-lived or test gateway credentials, and monitor any logs/output to ensure secrets are masked. If you need stronger assurance, ask the author for concrete command examples the agent will run (so you can review them) or require that the ski...详细分析 ▾
✓ 用途与能力
The name/description (SSH tunnel node recovery) matches the SKILL.md procedure and the listed inputs (ssh-target, api-endpoint, gateway-credential, node id). All requested data and checks (process existence, local forward bound, endpoint locality, credential validity, probe/status re-check) are coherent with diagnosing SSH tunnel connectivity issues.
ℹ 指令范围
Instructions are scoped to diagnostics and remediation of SSH tunnels; they imply the agent will inspect local process/socket state and re-run probes (e.g., ps/ss/netstat, ssh -L/ssh control commands, api probes). The SKILL.md does not prescribe exact commands, so the agent will have discretion — this is reasonable for a troubleshooting skill but grants the agent the ability to run system/network checks at runtime. The safety section appropriately instructs masking sensitive values.
✓ 安装机制
No install spec and no code files (instruction-only) — minimal risk because nothing is written to disk or automatically fetched at install time.
ℹ 凭证需求
The skill expects a gateway-credential input at runtime but declares no required environment variables or primary credential in metadata. This is not necessarily wrong (inputs can be provided interactively), but users should be aware the skill will ask for sensitive credentials to validate gateway auth. No unrelated credentials or config paths are requested.
✓ 持久化与权限
always is false and there is no install-time persistence. The skill does not request elevated or permanent agent privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/1
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install oc-ssh-tunnel-node-recovery
镜像加速npx clawhub@latest install oc-ssh-tunnel-node-recovery --registry https://cn.longxiaskill.com