📦 Unit — 单位换算
v1.0.1一键完成长度、重量、面积、体积、温度、时间、速度、数据存储、能量、功率、压力等基础单位与150+货币实时汇率的全能换算，结果精准即时。
0· 236·0 当前·0 累计
by 下载技能包
最后更新
2026/3/13
安全扫描
OpenClaw
安全
medium confidenceThe skill appears to do what it claims (offline unit conversions + online currency lookups) and does not request unrelated credentials, but the included Python code is sloppy and writes a cache file to the user's home directory and the full source was truncated in the review, so further inspection/testing is recommended.
评估建议
This skill is internally consistent: it runs a bundled Python script for conversions and uses exchangerate.host for currency rates. Before installing, consider: 1) The script will attempt network requests for currency lookups — confirm your environment allows that and you are okay with contacting https://api.exchangerate.host. 2) It writes a cache file to your home directory (~/.unit_converter_cache.json); review/clean that file if needed. 3) The Python code contains duplicated keys and comment/...详细分析 ▾
✓ 用途与能力
Name/description describe unit conversions and realtime currency rates. The package includes a converter script and SKILL.md that instructs use of exchangerate.host for currency data — these requirements align with the stated purpose.
ℹ 指令范围
Runtime instructions tell the agent to run the bundled Python script or, if unavailable, to call exchangerate.host via requests. The instructions do not ask the agent to read unrelated files or environment variables. Note: the script persists a cache file in the user's home (~/.unit_converter_cache.json) and makes outbound HTTP requests for currency rates (expected for this skill).
✓ 安装机制
No install spec; skill is instruction + code. requirements.txt only references 'requests'. No downloads from unknown URLs or archive extraction; low install risk. The SKILL.md tells users to 'pip install requests' if missing.
✓ 凭证需求
The skill declares no required environment variables or credentials. Network access is needed only for currency lookups (exchangerate.host) which matches the described behavior. No unrelated secrets or config paths are requested.
ℹ 持久化与权限
always:false (normal). The script will create/modify a cache file at Path.home()/.unit_converter_cache.json, which is within the skill's scope but is persistent filesystem activity the user should be aware of.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/13
- Reformatted SKILL.md for improved readability (fixed line breaks and spacing). - No changes to skill logic or functionality. - No file changes detected beyond formatting.
● 无害
安装命令
点击复制官方npx clawhub@latest install unit
镜像加速npx clawhub@latest install unit --registry https://cn.longxiaskill.com