📦 Zip — 压缩解压加密
v3.0.1批量压缩、解压、列目录、加密 ZIP 文件，适用于归档、提取、备份加密及批量操作。
0· 502·2 当前·2 累计
by 下载技能包
最后更新
2026/3/19
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do exactly what it says: local ZIP operations using zip/unzip. Before installing: ensure you have zip/unzip available. Do not pass sensitive passwords on the command line (avoid zip password <pass>); instead use interactive/more secure mechanisms or external encrypted key stores because command-line arguments are visible to other users and may be recorded in shell history. Be aware that zip -P uses legacy ZipCrypto which is weak—use stronger encryption tools if protecting h...详细分析 ▾
✓ 用途与能力
Name/description (compress, extract, list, encrypt ZIPs) align with the provided script. The script requires zip/unzip at runtime (checked by check_deps), which is appropriate and expected for the stated functionality.
ℹ 指令范围
Instructions are limited to running the included scripts/script.sh which only operates on local files and uses standard tools (zip, unzip, grep, awk, stat, du). No network endpoints or unrelated system paths are referenced. Note: the password command accepts the ZIP password as a command-line argument, which exposes it to process listings and shell history—this is a security concern for secrets handling (not a coherence issue).
✓ 安装机制
No install spec is provided (instruction-only plus a shipped script). Nothing is downloaded or written to disk by an installer; the single script runs using system binaries. This is low risk and proportionate.
ℹ 凭证需求
The skill requests no environment variables or credentials (appropriate). However, the 'password' command requires a plaintext password argument; that design leaks secrets via process arguments and shell history and uses zip's -P which offers weak ZipCrypto encryption—considered a security hygiene note.
✓ 持久化与权限
always is false, no special persistence or modification of other skills or global agent settings. The skill is user-invocable and may be called autonomously (platform default), which is expected.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv3.0.12026/3/16
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install zip
镜像加速npx clawhub@latest install zip --registry https://cn.longxiaskill.com