by 安全扫描
OpenClaw
安全
medium confidence该技能是 QJZD Nav CLI 的纯指令路由，其需求与指令均服务于该用途；使用前请验证 qjzd-nav 二进制文件的来源。
评估建议
This skill is internally consistent for controlling a local qjzd-nav CLI. Before installing or invoking it, verify that the qjzd-nav binary on your system is the official/trusted binary (check its source, checksum, or package manager). Be aware the CLI will read config files (e.g., ~/.config/qjzd-nav/config.json) and uses the OS keyring to store credentials — if you don't trust the binary, do not allow it to access those stores. If you want to be extra cautious, run qjzd-nav --help and a few saf...详细分析 ▾
✓ 用途与能力
The skill describes a CLI router for QJZD Nav and only requires the qjzd-nav binary, which is exactly what you'd expect for this purpose. No unrelated binaries, env vars, or installs are requested.
ℹ 指令范围
SKILL.md stays within CLI usage (help, completion, commands) and references standard config locations ($QJZD_NAV_CLI_CONFIG_DIR, $XDG_CONFIG_HOME, $HOME) and system keyring storage. These references are expected for a CLI but do mean the agent (when running the qjzd-nav binary) may read config files and use the OS keyring for credentials.
✓ 安装机制
No install spec is provided; this is instruction-only and will not download or write code. That is the lowest-risk install profile.
✓ 凭证需求
The skill declares no required environment variables or credentials. The documented use of the system keyring and standard config paths is proportionate to a CLI that stores profiles and credentials.
✓ 持久化与权限
The skill is not always-on and is user-invocable; it does not request elevated or persistent platform privileges nor indicate it will modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.22026/4/19
此版本无可见变更。 未检测到前后版本间文件变动。 功能与文档保持不变。
● 无害
安装命令
点击复制官方npx clawhub@latest install qjzd-nav-cli
镜像加速npx clawhub@latest install qjzd-nav-cli --registry https://cn.longxiaskill.com 镜像可用
技能文档
这是 QJZD Nav CLI 技能集的入口技能。若请求仅写“使用 QJZD Nav CLI”或跨多个领域，先从此处开始，再跳转到对应领域的技能。
技能映射
qjzd-nav-cli-auth：登录、配置档案、切换档案、钥匙环与凭证修复qjzd-nav-cli-content：链接、分类与标签管理qjzd-nav-cli-operations：备份、恢复与设置管理
快速路由
用以下命令定位正确领域： ``bash
qjzd-nav --help
qjzd-nav auth --help
qjzd-nav link --help
qjzd-nav category --help
qjzd-nav tag --help
qjzd-nav backup --help
qjzd-nav settings --help
qjzd-nav completion --help
` Shell 补全
生成并安装 Shell 补全脚本：
`bash
# Bash
eval "$(qjzd-nav completion bash)"
# Zsh
eval "$(qjzd-nav completion zsh)"
`
启用后按 Tab 补全：
`bash
qjzd-nav
qjzd-nav auth
qjzd-nav link
` 共享默认规则
- 除非任务公开，否则优先使用已认证档案。
环境相关时使用--profile。自动化场景使用--json。破坏性非交互操作慎用--force。
顶层领域
auth- 认证与档案管理link- 链接 CRUD 操作category- 分类 CRUD 操作tag- 标签 CRUD 操作backup- 备份与恢复操作settings- 站点设置管理
配置与密钥
档案元数据存储位置：
若设置了QJZD_NAV_CLI_CONFIG_DIR，则为$QJZD_NAV_CLI_CONFIG_DIR/config.json否则为$XDG_CONFIG_HOME/qjzd-nav/config.json再否则为$HOME/.config/qjzd-nav/config.json
凭据通过系统钥匙环由 @napi-rs/keyring` 存储。