扫描报告
0 /100
openclaw-ref
OpenClaw platform reference - plugin system, extensions, configuration, boot/provisioning, channels, models, CLI
This is a pure documentation/reference skill containing only Markdown files describing the OpenClaw platform. No executable code, scripts, dependencies, or dangerous patterns are present.
可以安装
This skill is safe to use. No security concerns identified.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | READ | ✓ 一致 | Markdown files contain only read-only reference documentation |
| 网络访问 | NONE | NONE | — | No network calls; example URLs are generic documentation placeholders |
| 命令执行 | NONE | NONE | — | No shell scripts or command execution found |
| 环境变量 | NONE | NONE | — | No environment variable access or iteration |
| 技能调用 | READ | READ | ✓ 一致 | SKILL.md explicitly grants read-only reference access to platform documentation |
| 剪贴板 | NONE | NONE | — | No clipboard access patterns |
| 浏览器 | NONE | NONE | — | No browser automation or interaction |
| 数据库 | NONE | NONE | — | No database access or queries |
3 项发现
中危 外部 URL 外部 URL
https://www.apache.org/licenses/ LICENSE.txt:3 中危 外部 URL 外部 URL
https://api.provider.com/v1 references/models-providers.md:12 中危 外部 URL 外部 URL
https://instance.agentbox.ai/v1 references/models-providers.md:104 目录结构
9 文件 · 184.6 KB · 3662 行 Markdown 8f · 3500L
Text 1f · 162L
├─
▾
references
│ ├─
boot-provisioning.md
Markdown
│ ├─
channels-extensions.md
Markdown
│ ├─
cli-commands.md
Markdown
│ ├─
configuration.md
Markdown
│ ├─
github-context.md
Markdown
│ ├─
models-providers.md
Markdown
│ └─
plugin-system.md
Markdown
├─
LICENSE.txt
Text
└─
SKILL.md
Markdown
安全亮点
✓ Pure documentation/reference skill with no executable code
✓ All content is Markdown - no scripts, binaries, or compiled code
✓ No external resource fetches or network dependencies
✓ No credential harvesting or sensitive path access
✓ No obfuscation techniques (base64, eval, etc.)
✓ License file present (Apache 2.0) with standard attribution
✓ Documentation is well-structured with version tracking (2026.4.1)
✓ Pre-scan identified no sensitive files, binary files, or IOC threats
✓ Example URLs in documentation are generic placeholders (api.provider.com, instance.agentbox.ai) not pointing to malicious infrastructure