by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This is a coherent tmux-based orchestration manual rather than code. Before installing or using it: 1) Understand it will instruct the agent to send keystrokes into tmux and to auto-accept 'trust' and approval prompts — that can acknowledge prompts that you might otherwise want to inspect. 2) Verify the referenced scripts (e.g., .orchestrix-core/scripts/start-orchestrix.sh, monitor-agent.sh) are present in your project and review their contents for dangerous commands. 3) If you plan to run this ...详细分析 ▾
✓ 用途与能力
Name/description claim a tmux-based multi-agent orchestration guide and the SKILL.md provides detailed tmux send-keys protocols, completion-detection, and handoff procedures — these requirements match the stated purpose and there are no unrelated env vars, binaries, or install steps.
ℹ 指令范围
Instructions stay within the orchestration domain (sending tmux keystrokes, capturing panes, checking files, running monitor/start scripts). However the guide explicitly instructs automatically accepting 'trust this folder' prompts and auto-responding to approval prompts (sending 'y'), which grants the controller broad authority to acknowledge prompts on behalf of the interactive agent; review these behaviors before use.
✓ 安装机制
No install spec or external downloads — skill is instruction-only, so nothing is written to disk by the skill itself. Lower installation risk, but referenced scripts (e.g., .orchestrix-core/scripts/monitor-agent.sh, start-orchestrix.sh) are expected to exist in the project and must be inspected manually.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. The operations described read terminal panes and local project files (expected for a tmux orchestration guide) and do not request unrelated secrets.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request permanent/autonomous presence beyond normal agent invocation. That said, its recommended automated acceptance behavior increases the potential for side effects when the skill is run.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSmacOS · Linux
版本
latestv3.0.02026/3/12
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install orchestrix-guide
镜像加速npx clawhub@latest install orchestrix-guide --registry https://cn.longxiaskill.com