by 安全扫描
OpenClaw
安全
high confidenceThis is a simple, instruction-only informational skill about Rivian that does not request credentials, install software, or perform file/network operations — it appears to do what it says.
评估建议
The skill is an offline/instruction-only summary and does not request any secrets or install code, so it is internally consistent. However, the skill's source and homepage are not provided, so verify any important facts (delivery counts, financing, dates) against reputable sources before acting on them. If you need real-time data (e.g., latest deliveries, earnings, or recalls), prefer official filings, Rivian's site, or trusted news APIs since this skill appears to be a static summary.详细分析 ▾
✓ 用途与能力
The name/description (Rivian company/product info) matches the SKILL.md content, which is a static summary of company history, products, and metrics. There are no unrelated requirements (no env vars, binaries, or config paths).
✓ 指令范围
SKILL.md contains only factual/summary content and trigger phrases (read_when). It does not instruct the agent to read files, access environment variables, call external endpoints, or exfiltrate data. Scope is limited to providing Rivian information.
✓ 安装机制
No install spec and no code files; nothing is written to disk or fetched at install time. This is the lowest-risk pattern for a skill.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. There is no disproportionate access requested for its stated purpose.
✓ 持久化与权限
always is false and the skill is user-invocable only; it does not request permanent/system-wide privileges or modify other skills/configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install rivian
镜像加速npx clawhub@latest install rivian --registry https://cn.longxiaskill.com