by 安全扫描
OpenClaw
安全
high confidenceThis skill is a small, self-contained command-line profiling/logging utility that stores data locally (~/.local/share/web-profiler), does not request credentials, and contains no network or unusual system access.
评估建议
This appears to be a benign local logging/profiling tool. Before installing or running: (1) review scripts/script.sh yourself (it will create ~/.local/share/web-profiler and write log/export files there); (2) avoid entering secrets or sensitive data into the tool because user-provided input is logged; (3) if you intend to share exported data, check the export output for formatting issues (there's a minor bug risk in the JSON export implementation); (4) if you need remote reporting or integration...详细分析 ▾
✓ 用途与能力
The name and description match the included script and SKILL.md: a CLI tool for recording, searching, exporting, and reporting profiling entries. Required capabilities (local file storage) are appropriate for the stated purpose.
✓ 指令范围
SKILL.md instructs the agent to run local commands and the script implements those commands. All runtime actions are limited to reading/writing log files under the user's home directory; there are no instructions to read unrelated system files, environment variables, or to send data to external endpoints.
ℹ 安装机制
No install spec (instruction-only), but the repository includes a shell script (scripts/script.sh) that is the implementation. The script does not download or execute remote code. NOTE: running the script will create and write files under ~/.local/share/web-profiler.
✓ 凭证需求
The skill requests no environment variables or credentials. It uses $HOME for a local data directory, which is proportional to a CLI logging tool. There are no unrelated secrets or config paths requested.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or global agent configuration. Its persistent footprint is limited to its own data directory under the user's home.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/20
publish v1.0.0
● 无害
安装命令
点击复制官方npx clawhub@latest install web-profiler
镜像加速npx clawhub@latest install web-profiler --registry https://cn.longxiaskill.com