Pre judgment of similar cases wdy — Pre judgment of similar cases wdy
v1.0.1类案预判(法律检索 + 类似案例)。当用户描述一个纠纷或案件时（如'被骗了2万'、'朋友借钱不还'、'被打伤了'），自动检索相关法律条文和类似判例，分析法律后果、胜诉概率、可主张的赔偿及建议下一步行动。适用于：侵权责任、诈骗欺诈、合同纠纷、债务纠纷、治安纠纷、专利/商标/著作权等。
0· 26·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and runtime instructions are consistent with its stated purpose (remote legal-law and similar-case lookup using the WenDaoYun API); the main risk is expected privacy exposure from sending user case text to an external API.
评估建议
This skill behaves like a remote legal search: it sends the case text you provide to a third-party API (WenDaoYun). Before installing or using it, consider the following:
- Privacy: avoid sending unnecessary personal data (names, ID numbers, exact addresses); anonymize or redact PII where possible. For highly sensitive matters, prefer an offline/local database or counsel.
- Trust the provider: verify h5.wintaocloud.com / WenDaoYun's privacy policy, retention rules, and terms; confirm you are com...详细分析 ▾
✓ 用途与能力
The skill is a legal-case retrieval helper and explicitly requires a WENDAOYUN_API_KEY and calls endpoints at h5.wintaocloud.com to fetch laws and similar cases. Requesting a single API key for an external legal-search service is proportional and expected for this functionality.
ℹ 指令范围
SKILL.md instructs the agent to POST user-provided case descriptions to the third-party API (get-laws, get-cases) via curl/exec. That behaviour is within the skill's purpose but necessarily sends potentially sensitive PII to an external service; the documentation warns about this. Also note use of exec+curl can expose command-line arguments in process listings or logs if not handled carefully — the skill mitigates some risk by requiring an env var check and forbidding echoing the key, but callers should still avoid including sensitive data in logged commands or transcripts.
✓ 安装机制
This is instruction-only (no install spec, no code files). Nothing is written to disk or downloaded by the skill itself, which minimizes install-time risk.
✓ 凭证需求
Only one required environment variable (WENDAOYUN_API_KEY) is declared in registry.json and SKILL.md. That single credential is justified by the need to authenticate to the external API. The skill explicitly warns not to print the key.
✓ 持久化与权限
always is false and the skill is user-invocable with normal autonomous invocation allowed. The skill does not request system-level persistence, nor does it modify other skills or system configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/17
- 改用 WENDAOYUN_API_KEY 作为环境变量，替代原先的 API_KEY。 - 更新获取 API Key 的网址与描述说明，更统一、标准化。 - 输出格式全部改为带 "code": 200、"data": [...] 的结构。 - 所有接口调用示例、环境变量检测语句、错误提示同步调整为新命名 (WENDAOYUN_API_KEY)。 - 相关文档内容、敏感信息处理、隐私风险警示等统一适配新变量名。
● 无害
安装命令
点击复制官方npx clawhub@latest install pre-judgment-of-similar-cases-wdy
镜像加速npx clawhub@latest install pre-judgment-of-similar-cases-wdy --registry https://cn.longxiaskill.com 镜像可用