by 安全扫描
OpenClaw
安全
medium confidence该技能是 QJZD Nav CLI 的纯指令路由器，其需求与指令均服务于该目的；使用前请验证 qjzd-nav 二进制文件的来源。
评估建议
This skill is internally consistent for controlling a local qjzd-nav CLI. Before installing or invoking it, verify that the qjzd-nav binary on your system is the official/trusted binary (check its source, checksum, or package manager). Be aware the CLI will read config files (e.g., ~/.config/qjzd-nav/config.json) and uses the OS keyring to store credentials — if you don't trust the binary, do not allow it to access those stores. If you want to be extra cautious, run qjzd-nav --help and a few saf...详细分析 ▾
✓ 用途与能力
The skill describes a CLI router for QJZD Nav and only requires the qjzd-nav binary, which is exactly what you'd expect for this purpose. No unrelated binaries, env vars, or installs are requested.
ℹ 指令范围
SKILL.md stays within CLI usage (help, completion, commands) and references standard config locations ($QJZD_NAV_CLI_CONFIG_DIR, $XDG_CONFIG_HOME, $HOME) and system keyring storage. These references are expected for a CLI but do mean the agent (when running the qjzd-nav binary) may read config files and use the OS keyring for credentials.
✓ 安装机制
No install spec is provided; this is instruction-only and will not download or write code. That is the lowest-risk install profile.
✓ 凭证需求
The skill declares no required environment variables or credentials. The documented use of the system keyring and standard config paths is proportionate to a CLI that stores profiles and credentials.
✓ 持久化与权限
The skill is not always-on and is user-invocable; it does not request elevated or persistent platform privileges nor indicate it will modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.22026/4/19
此版本无可见变更。 未检测到前后版本间的文件变动。 功能与文档保持不变。
● 无害
安装命令
点击复制官方npx clawhub@latest install qjzd-nav-cli
镜像加速npx clawhub@latest install qjzd-nav-cli --registry https://cn.longxiaskill.com
技能文档
这是 QJZD Nav CLI 技能集的路由技能。若请求仅写“使用 QJZD Nav CLI”或涉及多个领域，请先从此处开始，再跳转至对应领域技能。
技能映射
qjzd-nav-cli-auth：登录、配置 profile、切换 profile、修复 keyring 与凭据qjzd-nav-cli-content：链接、分类与标签管理qjzd-nav-cli-operations：备份、还原与设置管理
快速路由
用以下命令定位正确领域： ``bash
qjzd-nav --help
qjzd-nav auth --help
qjzd-nav link --help
qjzd-nav category --help
qjzd-nav tag --help
qjzd-nav backup --help
qjzd-nav settings --help
qjzd-nav completion --help
` Shell 补全
生成并安装 shell 补全脚本：
`bash
# Bash
eval "$(qjzd-nav completion bash)"
# Zsh
eval "$(qjzd-nav completion zsh)"
`
启用后按 Tab 补全：
`bash
qjzd-nav
qjzd-nav auth
qjzd-nav link
` 共享默认规则
- 除非任务公开，优先使用已认证 profile。
环境相关时加--profile。自动化场景加--json。破坏性非交互操作慎用--force。
顶级领域
auth- 认证与 profile 管理link- 链接 CRUD 操作category- 分类 CRUD 操作tag- 标签 CRUD 操作backup- 备份与还原操作settings- 站点设置管理
配置与密钥
Profile 元数据存储路径：
若设置QJZD_NAV_CLI_CONFIG_DIR，则为$QJZD_NAV_CLI_CONFIG_DIR/config.json否则按$XDG_CONFIG_HOME/qjzd-nav/config.json再否则为$HOME/.config/qjzd-nav/config.json
凭据通过系统 keyring 由 @napi-rs/keyring` 存储。