by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent with its advertised purpose and doesn't request credentials or system access. If you plan to run the optional `npx` install shown in the README, verify the npm package and its GitHub repo (author, recent activity, README, issues) before installing, since npx will fetch and execute third-party code. Never paste secrets (API keys, account passwords) into the skill prompts — the skill only needs product details and goals. If you want extra caution, use the instruction-only be...详细分析 ▾
✓ 用途与能力
Name, description, and capabilities (platform-specific title templates, keyword placement, character limits, A/B variants) align with a title-optimization assistant. It does not request unrelated resources or credentials.
✓ 指令范围
SKILL.md instructs the agent to collect product and platform info from the user and ask one follow-up multiple-choice question; it does not instruct reading system files, environment variables, or sending data to unexpected endpoints. The guidance is narrowly scoped to the stated functionality.
ℹ 安装机制
There is no declared install spec in the registry metadata (instruction-only). SKILL.md includes an optional install example using `npx skills add nexscope-ai/eCommerce-Skills`, which would pull code from npm if executed — that is typical but does involve downloading third-party code. Because installation is optional and not part of the skill bundle, this is only a caution rather than a direct risk from the skill itself.
✓ 凭证需求
The skill declares no required env vars, credentials, or config paths. The runtime instructions do not ask for secrets or unrelated credentials; requested user input (product details, goals, current title) is appropriate for the purpose.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent system-wide privileges. Default autonomous invocation is allowed by the platform but is not combined with other red flags here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install product-title-optimization
镜像加速npx clawhub@latest install product-title-optimization --registry https://cn.longxiaskill.com