by 安全扫描
OpenClaw
安全
high confidenceThe skill is coherent with its stated purpose (publishing markdown to md.page) and contains no glaring mismatches, but it does assume local tools and file-reading that the metadata doesn't declare and has a small example typo you should notice before use.
评估建议
This skill appears to do exactly what it says: POST markdown to md.page and return a shareable URL. Before installing or using it, keep these points in mind: (1) the instructions assume access to the agent's file-read capability and to curl/python3 on the execution platform — verify you are comfortable granting the agent access to files you may publish and that those binaries are available; (2) never publish secrets or credentials — the skill itself recommends scanning for secrets, so confirm an...详细分析 ▾
✓ 用途与能力
Name and description match the instructions: the skill posts markdown to md.page's publish API. The package.json homepage and repository point at md.page, consistent with the stated purpose.
ℹ 指令范围
SKILL.md instructs the agent to read local files (via a 'Read' tool) and to POST content using curl (and recommends using python3 for JSON encoding). Reading files and sending them to md.page is expected for a publish workflow, but the metadata lists no required binaries/tools even though the instructions rely on curl, bash, and python3. Also the example response's expires_at date appears inconsistent with the published timestamp (likely a typo).
✓ 安装机制
This is an instruction-only skill with no install spec and no code to download or execute; no install-related risks were identified.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The SKILL.md explicitly warns to scan for secrets before publishing, which is appropriate and minimizes accidental credential leakage.
✓ 持久化与权限
always is false and the skill does not request persistent or cross-skill privileges. It does instruct using agent tools at runtime but does not request special platform-level privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/3/29
Add secret scanning before publish, remove rate-limit/bot-blocking warnings, add keywords for discoverability
● 无害
安装命令
点击复制官方npx clawhub@latest install publish-to-mdpage
镜像加速npx clawhub@latest install publish-to-mdpage --registry https://cn.longxiaskill.com