by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent and instruction-only, but take these precautions before using it: (1) Avoid broad '>' subscriptions in production — they can capture unrelated or sensitive events and cause high traffic; subscribe narrowly once you know the subjects you need. (2) Verify and prefer wss:// endpoints (encrypted) and confirm the endpoint domain is legitimate for your guild. (3) Run discovery against a test guild or read-only environment first to avoid accidental data collection or rate limits....详细分析 ▾
✓ 用途与能力
Name/description match the instructions: all guidance is about discovering and subscribing to GRASS NATS subjects via a WebSocket endpoint obtained from guild config. It does not request unrelated privileges or credentials.
ℹ 指令范围
Instructions are focused on discovery and subscribing to event subjects. However the guidance to subscribe to the '>' wildcard (see all traffic) may cause you to receive large volumes of unrelated or sensitive events; the example endpoint uses ws:// (not wss://), which is unencrypted and should be validated before use.
✓ 安装机制
No install spec or code files — instruction-only — so nothing is written to disk and no external packages are fetched by an installer.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths; this is proportionate to the stated purpose of connecting to a public/internal WebSocket endpoint.
✓ 持久化与权限
The skill does not request always-on inclusion or elevated persistent privileges and contains no instructions to modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/3/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install structs-streaming
镜像加速npx clawhub@latest install structs-streaming --registry https://cn.longxiaskill.com