by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: it will run git diff and a local Python script that inspects and converts SQL files. Before using it: (1) ensure you trust the included script (review scripts/release_checker.py) because it will read and operate on your repository files; (2) run it in a controlled environment (container or dedicated runner) if you are cautious; (3) install the dependency sqlglot (requirements.txt) in a virtualenv before execution; and (4) be aware it executes subprocesses (...详细分析 ▾
✓ 用途与能力
Name/description (release compatibility, git-diff, SQL conversion) match the included SKILL.md and the Python script. Required tools (git, python) and file access are appropriate for the stated functionality; no credentials or unrelated services are requested.
✓ 指令范围
Runtime instructions only ask the agent to run git diff, list/inspect changed files, interactively ask the user which components to process, and call the included Python script on project files. The script reads repository files and transforms SQL — these actions are within the declared scope. Note: the skill will access the project filesystem and execute git/python locally, which is expected but should be noted by users.
ℹ 安装机制
There is no install spec (instruction-only), but the bundle includes a Python script and requirements.txt listing sqlglot. The environment must have Python and sqlglot installed; the skill does not automatically install dependencies. This is a low-to-moderate operational note (user or host must provide the runtime dependency).
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. It operates on repository files and user-supplied paths only. There are no demands for unrelated tokens/keys — proportional to purpose.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request permanent or elevated platform privileges. Autonomous invocation is allowed (platform default) but is not coupled with other red flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/7
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install release-checker
镜像加速npx clawhub@latest install release-checker --registry https://cn.longxiaskill.com