by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent for orchestrating multi-perspective reviews. Before installing or enabling it: (1) review the two configuration files it reads (.openclaw/review-orchestrator.yaml and .claude/review-orchestrator.yaml) so you know what models/endpoints and settings will be used; (2) confirm you are comfortable with the skill reading any files you pass as review targets and writing outputs to docs/reviews/; (3) if you install the optional dependencies (failure-memory, conte...详细分析 ▾
✓ 用途与能力
Name/description (multi-perspective review orchestration) matches what the SKILL.md describes: selecting review types, spawning review agents/modes, gating, and writing results to docs/reviews/. Declared config paths (.openclaw/... and .claude/...) and optional integration with failure-memory/context-verifier are coherent with a configurable review workflow.
ℹ 指令范围
Instructions are limited to review orchestration: selecting review types, reading target file paths/topics supplied by the user, spawning internal review modes, and writing outputs to docs/reviews/. However, the skill will read configuration files (.openclaw/review-orchestrator.yaml and .claude/review-orchestrator.yaml) and any workspace files supplied as review targets — review-targets can be arbitrary files in the workspace, so confirm you are comfortable with the skill reading those files. The SKILL.md explicitly says no external third-party services are called; this relies on configuration not pointing to remote endpoints.
✓ 安装机制
Instruction-only skill with no install spec or code files; lowest install risk. SKILL.md recommends installing separate skills (failure-memory, context-verifier) as optional dependencies — those are separate installs the user must intentionally run.
ℹ 凭证需求
Skill requests no environment variables or credentials. It does declare configuration files (.openclaw/... and .claude/...) which may contain user-configured model endpoints or credentials in some setups — inspect those files before enabling to ensure they don't point to remote services or contain secrets you don't want the skill to use. Dependency recommendation (failure-memory) may record observations (per SKILL.md); check that dependency's behavior if you plan to enable integration.
✓ 持久化与权限
always is false and there is no install hook or code that alters other skills or global agent settings. The skill writes review results to docs/reviews/ in the workspace, which is expected and scoped to the user's project.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.5.12026/2/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install review-orchestrator
镜像加速npx clawhub@latest install review-orchestrator --registry https://cn.longxiaskill.com镜像同步中