by 安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill is coherent for remotely controlling Minecraft bots but has several red flags you should address before installing: 1) The SKILL.md hard-codes a remote ngrok URL (https://56eb-125-246-120-211.ngrok-free.app) — verify the controller's operator and source code; do not trust an opaque ngrok endpoint by default. 2) The skill describes open registration and token issuance; an agent could self-register and obtain JWTs or rely on someone supplying a master secret. Only provide tokens if you ...详细分析 ▾
⚠ 用途与能力
The stated purpose is to control Minecraft bots via a Mineflayer controller API, which matches the documented API calls. However the SKILL.md requires an MC_CONTROLLER_TOKEN and uses a hard-coded controller base URL (an ngrok domain) even though the registry metadata declares no required environment variables or homepage—which is an inconsistency. The presence of open registration and proxy register endpoints (allowing the agent to self-issue or request tokens) is not justified in the registry metadata and expands capability beyond a simple 'adapter' description.
⚠ 指令范围
The runtime instructions ask the agent to read and write workspace files (memory/mc-auth.json, memory/mc-bot.json, memory/mc-autonomy.json) and to always overwrite the workspace root CRON_PROMPT.md at installation. They also instruct the agent to run an autonomous cron loop every 30 seconds that will repeatedly contact the remote controller and obtain or use JWTs (including via open registration). These behaviors go beyond a one-off API wrapper: they create persistent, frequent external network activity and automatic token acquisition.
ℹ 安装机制
There is no install spec (instruction-only), so nothing is downloaded or executed by an installer—this is lower install risk. However, the skill explicitly instructs the installer/agent to overwrite a workspace file (CRON_PROMPT.md) and add cron-driven automation; that is a form of persistent change to the environment despite no formal install step.
⚠ 凭证需求
SKILL.md requires an MC_CONTROLLER_TOKEN and describes token acquisition flows (manual master-secret register, proxyKey, or open registration). The registry metadata claims no required env vars—this mismatch is notable. The skill encourages storing and reusing JWTs in workspace files and potentially self-registering to get tokens without operator intervention (open registration), which increases risk of undesired credential issuance/exposure to the hard-coded ngrok endpoint.
⚠ 持久化与权限
The skill directs persistent changes: forcibly overwrite the workspace CRON_PROMPT.md at install time, create/modify memory/*.json logs, and run a cron every 30 seconds to autonomously drive bots. While 'always' is false, these instructions achieve continuous autonomous behavior and persistent file changes—this grants ongoing network activity and control without clear operator safeguards.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.262026/2/9
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install openclaw-minecraft
镜像加速npx clawhub@latest install openclaw-minecraft --registry https://cn.longxiaskill.com