by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears coherent for running RDK X5 /app samples, but it lets you execute system Python scripts and native binaries on the device and may require root. Before using it: (1) verify the skill source and confirm you trust the device and the /app contents (homepage/source unknown); (2) inspect scripts under /app for unexpected network calls, shelling out, or data-exfiltration logic; (3) avoid running code as root unless necessary — prefer running under a limited user or review the code fi...详细分析 ▾
✓ 用途与能力
The name and description claim access to /app resources on RDK X5 and the SKILL.md exclusively documents running samples, building demos, and using GPIO/multimedia/AI assets under /app; nothing requested (no env vars, no installs) is unrelated to that purpose.
ℹ 指令范围
Instructions explicitly tell the agent to execute scripts and binaries from /app using the system Python (/usr/bin/python3.10) and to run make/./run_tuning.sh. This stays within the stated scope (managing /app demos and hardware) but grants the agent the ability to execute arbitrary code present in /app and to require root/hardware permissions — a legitimate capability for this purpose but a potential operational risk if the files are untrusted.
✓ 安装机制
There is no install specification and no code shipped with the skill (instruction-only), so nothing is written to disk or downloaded by the installer — this is low-risk from an install mechanism perspective.
ℹ 凭证需求
The skill does not request environment variables or external credentials. However, the runtime instructions require system-level Python and note that many operations require root or hardware permissions; those privileges are appropriate for hardware control but are not explicitly declared as required credentials in the registry metadata.
✓ 持久化与权限
The skill is not always-enabled, is user-invocable, and does not modify agent or other skills' configuration. It does not request persistent privileges beyond asking the operator to run system-level commands on the device when needed.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/7
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install rdkx5-app-resources
镜像加速npx clawhub@latest install rdkx5-app-resources --registry https://cn.longxiaskill.com镜像同步中