by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears safe and does what it claims: a local Python CLI tool for validating and reasoning about WGS84 coordinates. Before installing, confirm you are comfortable allowing Homebrew to install/upgrade Python on the host (or skip the install if python3 is already available). If you prefer tighter control, inspect scripts/wgs84_tool.py (it only reads CLI args and prints JSON) and verify no external network calls are required for your use. Note the agent config allows implicit invocation ...详细分析 ▾
✓ 用途与能力
The name/description (WGS84 coordinate checks and recommendations) matches the included files and required binaries. Requiring python3 and including a small Python script is proportional to the stated functionality. Mentioning qgis for file-based reprojection is reasonable as a hand-off and does not imply hidden requirements.
✓ 指令范围
SKILL.md instructs the agent to run the local script with explicit CLI arguments and to consult an included reference doc. There are no instructions to read unrelated files, access environment variables, or send data to external endpoints. The instructions are narrowly scoped to validating coordinates, guessing order, recommending UTM/CRS, and flagging China-offset risk.
ℹ 安装机制
Install spec uses a Homebrew formula to install Python 3 (brew 'python'), which is a well-known package source and appropriate for a Python-based skill. Note: Homebrew is platform-specific (macOS/Linux with brew); installing Python via brew may be unnecessary if python3 is already present and will modify the system's packages.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The Python script operates entirely on CLI inputs and prints JSON to stdout; it neither reads secrets nor attempts to access unrelated system configuration.
✓ 持久化与权限
Skill does not request always:true and does not modify other skills or system-wide configuration. agents/openai.yaml enables implicit invocation (allow_implicit_invocation: true), which permits the agent to invoke the skill when relevant — this is typical for utility skills and is not combined with other red flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/21
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install wgs84
镜像加速npx clawhub@latest install wgs84 --registry https://cn.longxiaskill.com