📦 Risk — 实用工具
v1.0.0工作流—identifying risks, likelihood 和 impact, mitigation plans, owners, residual risk acceptance, 和 tracking. Use when assessing...
0· 152·1 当前·2 累计
by @mike47512 安全扫描
OpenClaw
安全
high confidenceInstruction-only risk assessment workflow whose declared purpose matches its instructions and which requests no credentials, binaries, or installs.
评估建议
This skill is a plain-text risk-assessment workflow and appears safe to install: it doesn't request credentials or install code. Before using it with sensitive projects, avoid pasting secrets into prompts, review the agent's outputs for accuracy (LLMs can hallucinate), and if you operate in regulated environments, ensure you map the workflow to your mandated templates and approval paths.详细分析 ▾
✓ 用途与能力
The name/description (risk assessment workflow) align with the content of SKILL.md. No unrelated environment variables, binaries, or install steps are requested that would be disproportionate to a risk-assessment guide.
✓ 指令范围
SKILL.md contains a procedural six-stage risk-assessment workflow and checklists only. It does not instruct the agent to read files, access environment variables, call external endpoints, or perform actions outside the stated purpose.
✓ 安装机制
No install spec and no code files are present (instruction-only). This has the lowest filesystem/execution risk surface: nothing is downloaded or written by the skill itself.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. There are no requests for sensitive tokens or system access that would be disproportionate for a guidance workflow.
✓ 持久化与权限
always is false and there is no setup that modifies other skills or system settings. The skill may be invoked autonomously by the agent (default behavior) but that is normal for skills and not excessive here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install risk
镜像加速npx clawhub@latest install risk --registry https://cn.longxiaskill.com