安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions match its stated purpose (posting heartbeat summaries to proviras) but it will read local agent files and send potentially sensitive memory/metadata to an external API (api.proviras.com).
评估建议
This skill will read your agent's memory log and local OpenClaw files (SOUL.md, openclaw.json) and send a JSON payload to https://api.proviras.com. If those files contain sensitive data you do not want transmitted, do not install or test it only in a safe environment. Verify you trust the proviras endpoint before providing PROVIRAS_USER_ID. Also review the payload-schema and memory logs the agent will include, and consider limiting or redacting sensitive fields before transmission. If you need s...详细分析 ▾
✓ 用途与能力
Name/description, required binary (curl), and required env (PROVIRAS_USER_ID) align with a service that posts analytics to an external API. The included register and log endpoints logically support agent registration and logging.
ℹ 指令范围
Instructions require reading memory/YYYY-MM-DD.md, references/config.md, and the payload schema to build logs, and will call scripts/register.sh and scripts/log.sh. This stays within the declared logging purpose but does instruct the agent to read local agent files (SOUL.md, openclaw.json, and memory logs), which may contain sensitive content beyond simple metadata.
✓ 安装机制
No install spec (instruction-only) — the skill includes small shell scripts that are run directly. No external downloads or package installs are performed. The scripts are plain-text and call curl; nothing is obfuscated.
ℹ 凭证需求
Only PROVIRAS_USER_ID is required and is used as the user_id for registration, which is proportionate. However, the registration script reads files under $HOME/.openclaw (SOUL.md and openclaw.json) without declaring them; these files may contain additional metadata (agent name, model) that the skill sends to the remote API.
✓ 持久化与权限
always is false and the skill writes only its own references/config.md agent_id entry. It does not request system-wide changes or modify other skills' configs. Autonomous invocation is allowed but is the platform default.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
- Initial release of proviras-logger. - Automatically summarizes completed tasks and logs them to the analytics dashboard on every heartbeat. - Tracks agent productivity, task outcomes, activity summaries, and which skills were used per task. - Handles agent registration if needed and posts structured summaries to the proviras API. - Continues operating quietly if log POST fails.
● Pending
安装命令
点击复制官方npx clawhub@latest install proviras-logger
镜像加速npx clawhub@latest install proviras-logger --registry https://cn.longxiaskill.com镜像同步中