by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do exactly what it says: guide setup and create starter files. Before installing/use: (1) review the files it will create under ~/.openclaw/workspace and confirm you are comfortable with those locations; (2) never paste API keys into SOUL.md/USER.md as the guide warns — use openclaw configure or environment variables; (3) when following troubleshooting steps, avoid running global npm installs with sudo if possible (prefer nvm or your OS package manager); (4) be cautious whe...详细分析 ▾
✓ 用途与能力
Name/description (onboarding, setup, security guidance) matches the content: templates, guides, and instructions for creating SOUL.md, USER.md, MEMORY, HEARTBEAT and recommending/installing skills and APIs. Required permissions/credentials are not requested and all suggested integrations (Brave Search, calendar, channels) are reasonable for an onboarding kit.
ℹ 指令范围
SKILL.md instructs the agent to generate files under ~/.openclaw/workspace/, create templates, and run OpenClaw CLI commands (openclaw configure, openclaw health, etc.). This is expected for a setup skill, but the instructions imply the agent will read/write local files and enumerate installed skills/channels — users should be aware the setup process touches their workspace and agent configuration. Troubleshooting suggests 'sudo npm install -g openclaw', which is a common but higher-risk step (use nvm or avoid sudo when possible).
✓ 安装机制
Instruction-only skill with no install spec and no code executed by the registry installer. No downloads or third-party packages are pulled by the skill itself, so on-install risk is minimal.
✓ 凭证需求
The skill declares no required environment variables or credentials. It shows example env var usage (OPENAI_API_KEY, ANTHROPIC_API_KEY) only as advice for configuring OpenClaw; that is proportional to an onboarding guide. No unrelated secrets or broad credential access are requested.
✓ 持久化与权限
always is false and autonomous invocation defaults are unchanged. The skill directs creation of its own workspace files and templates (normal for a starter kit) and does not request to modify other skills or system-wide configs beyond using the OpenClaw CLI.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/25
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install openclaw-starter-kit
镜像加速npx clawhub@latest install openclaw-starter-kit --registry https://cn.longxiaskill.com