by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to be what it claims: a simple local stopwatch/logger. Before installing, review and accept that it will create and write files to ~/.local/share/stopwatch (you can change DATA_DIR in the script). The script does not contact the network or request secrets. If you care about data hygiene, avoid logging sensitive strings (anything you pass is appended to logs and exported), and consider reviewing or fixing the export routines (JSON values are not escaped and the JSON export has ...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, and the included script align: the tool is a terminal stopwatch/timer/logger that writes and reads local log files. There are no unrelated environment variables, binaries, or services requested.
ℹ 指令范围
The runtime instructions and the script operate only on a local data directory (~/.local/share/stopwatch) and stdout. They implement logging, search (grep), export, and simple stats. No instructions read unrelated system config, network endpoints, or other credentials. Minor implementation issues exist (e.g., JSON export does not escape values and a newline is written as a literal "\n]"), but these are functional bugs rather than signs of scope creep or hidden exfiltration.
✓ 安装机制
No install spec — instruction-only usage with an included Bash script. Nothing is downloaded from remote URLs or installed system-wide by the package; risk is low and consistent with a small utility script.
✓ 凭证需求
No credentials or special environment variables requested. The script uses $HOME to create a per-user data directory, which is appropriate for a local logging utility. There are no requests for unrelated service tokens or secret values.
✓ 持久化与权限
The skill does not request 'always' or other elevated persistent privileges. It writes to its own per-user data directory under ~/.local/share/stopwatch, which is normal for a CLI utility; it does not modify other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.02026/3/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install stopwatch
镜像加速npx clawhub@latest install stopwatch --registry https://cn.longxiaskill.com