by 安全扫描
OpenClaw
可疑
high confidenceThe skill's instructions match the stated purpose (scanning and deleting session files) but they rely on filesystem access and shell tools while the registry metadata declares no required paths or binaries — an incoherence worth investigating before install.
评估建议
This skill performs file-system operations (scanning and deleting OpenClaw session files) and expects to read from a sessions directory and use shell tools like jq/grep. Before installing: 1) Confirm you are comfortable granting the agent access to the sessions folder (e.g., ~/.openclaw/agents/...); 2) Ensure required command-line tools (jq, grep, head, bash) are available or ask the publisher to declare them; 3) Backup sessions if you may need them later; 4) Ask the publisher why requires.confi...详细分析 ▾
⚠ 用途与能力
The name and description match the instructions: analyzing and deleting OpenClaw session files. However, the skill's metadata declares no required config paths or binaries, yet the SKILL.md explicitly references a sessions directory (~/.openclaw/agents/main/sessions/) and file operations. The missing declaration of config paths is an inconsistency.
⚠ 指令范围
SKILL.md instructs scanning session files, parsing their contents, and deleting files after confirmation — all within the claimed purpose. But it also assumes access to 'session context' / 'system prompt' and uses shell commands (bash, head, jq, grep) without declaring those requirements. File deletion is inherently sensitive; the instructions correctly require explicit confirmation, but the scope of file access is broader than the declared metadata.
✓ 安装机制
This is an instruction-only skill with no install spec or code files, which minimizes installation risk. No artifacts are downloaded or written by an installer.
⚠ 凭证需求
The skill requests no environment variables or credentials (appropriate). However, it implicitly requires access to agent/session filesystem paths and relies on command-line tools (jq, grep, head). Those accesses are not declared in requires.configPaths or required binaries, creating a proportionality gap between declared and actual needs.
✓ 持久化与权限
The skill is not always-enabled and does not request persistent elevated privileges. It doesn't declare behavior that would modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install session-storage-management
镜像加速npx clawhub@latest install session-storage-management --registry https://cn.longxiaskill.com