by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent for its stated purpose: it teaches multiple ways to hide and recover messages in ordinary text and requires no extra permissions. Before installing, consider these practical cautions: (1) the encoding methods can be repurposed to hide sensitive information in otherwise-normal outputs, so avoid enabling the skill for agents that handle secrets or private data; (2) if you allow autonomous invocation, monitor outputs for hidden channels (acrostics, unusual word choices, sente...详细分析 ▾
✓ 用途与能力
Name, description, and all included documentation (SKILL.md and reference files) describe only text-based steganographic encoding/decoding methods; there are no unrelated env vars, binaries, or install steps requested. The requested surface (instruction-only, no credentials) is proportionate for the stated purpose.
ℹ 指令范围
The SKILL.md and deep-dive references strictly describe how to encode and decode hidden messages in natural text and verification practices — they do not instruct reading system files, accessing credentials, or network exfiltration. However, the techniques defined (especially multi-channel and resonance methods) are explicitly capable of hiding arbitrary plaintext in ordinary outputs, which could be misused to conceal sensitive data in agent responses. This is a behavioral risk (misuse), not an inconsistency with the skill's stated purpose.
✓ 安装机制
No install spec and no code files that would be written to disk; instruction-only skills have minimal install risk. The provided files are documentation only.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. Nothing in the instructions attempts to read undeclared env vars or system configuration.
✓ 持久化与权限
always is false and autonomous invocation is the platform default. The skill does not request persistent presence or elevated privileges, nor does it instruct modifying other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/28
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install stego-text
镜像加速npx clawhub@latest install stego-text --registry https://cn.longxiaskill.com