by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill is mostly harmless and fits its stated purpose, but before installing or using it: (1) confirm that the code-reviewer template (requesting-code-review/code-reviewer.md) actually exists where the skill expects it — the bundle you provided only contains SKILL.md; (2) ensure the agent runtime has git and access to the repository (the instructions run git commands but the skill metadata doesn't declare git as a required binary); (3) verify what the 'superpowers:code-reviewer' subagent is ...详细分析 ▾
ℹ 用途与能力
The name/description match the instructions: it guides requesting a code review and dispatching a code-reviewer subagent. However the SKILL.md expects a template file (requesting-code-review/code-reviewer.md) and the presence of git in the environment even though the skill metadata declares no required binaries or files.
⚠ 指令范围
Instructions ask the agent to run git commands (git rev-parse, git log) and to dispatch a 'superpowers:code-reviewer' subagent using a Task tool and a template path. The repository manifest contains only SKILL.md, so the referenced template file is not present here — the runtime instructions therefore refer to an external artifact and an external subagent whose behavior and permissions are unknown. This creates ambiguity and a potential failure or unexpected delegation at runtime.
✓ 安装机制
No install spec and no code files are present; the skill is instruction-only and does not write to disk during installation.
ℹ 凭证需求
The skill declares no environment variables or credentials (appropriate for its stated purpose). That said, it implicitly requires git and an accessible repository context and also depends on a separate 'superpowers:code-reviewer' subagent or service that may require credentials — those dependencies are not declared.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request persistent presence or elevated platform privileges in the provided metadata.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/25
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install timeflow-requesting-code-review
镜像加速npx clawhub@latest install timeflow-requesting-code-review --registry https://cn.longxiaskill.com