AI Copywriting Generator / AI 文案生成器安全扫描报告 — 可信 | ClawSafe

5 /100

AI Copywriting Generator / AI 文案生成器

一键生成爆款营销文案，涵盖小红书/抖音/朋友圈/电商详情页等 20+ 场景

A straightforward AI copywriting generation tool with no malicious behavior detected; all functionality is properly documented and uses legitimate API calls.

技能名称AI Copywriting Generator / AI 文案生成器

分析耗时27.4s

引擎pi

✓

可以安装

Approve for use. Consider documenting network access in SKILL.md for full transparency.

安全发现 1 项

严重性	安全发现	位置
低危	Network access not declared in SKILL.md 文档欺骗 The SKILL.md does not document that the skill makes outbound network requests to the OpenClaw API. This is a minor transparency gap — the network access is necessary for the core AI copywriting feature, and no sensitive data is exfiltrated. `client = OpenClaw(api_key=self.api_key) response = client.chat.completions.create(...)` → Add 'network: READ' to the allowed-tools mapping in SKILL.md documentation to improve transparency.	`copywriting_gen.py:36`

资源类型	声明权限	推断权限	状态	证据
文件系统	`NONE`	`NONE`	—	No file reads or writes in copywriting_gen.py
网络访问	`NONE`	`READ`	✓ 一致	copywriting_gen.py:36 - client.chat.completions.create() makes outbound API call…
命令执行	`NONE`	`NONE`	—	No subprocess, os.system, or shell execution calls found
环境变量	`NONE`	`READ`	✓ 一致	copywriting_gen.py:35 - reads OPENCLAW_API_KEY, which is necessary for the core …
技能调用	`NONE`	`NONE`	—	No skill-to-skill invocation detected
剪贴板	`NONE`	`NONE`	—	No clipboard access found
浏览器	`NONE`	`NONE`	—	No browser automation found
数据库	`NONE`	`NONE`	—	No database access found

1 项发现

🔗

中危外部 URL 外部 URL

https://discord.gg/clawd

SKILL.md:55

目录结构

2 文件 · 5.9 KB · 197 行

Python 1f · 138L Markdown 1f · 59L

├─ 🐍 copywriting_gen.py Python 138L · 4.7 KB

└─ 📝 SKILL.md Markdown 59L · 1.2 KB

依赖分析 1 项

包名	版本	来源	已知漏洞	备注
`openclaw`	`*`	pip	否	Version not pinned; verify package authenticity before deployment

安全亮点

✓ No subprocess, shell execution, or command injection vectors detected

✓ No credential harvesting or exfiltration — OPENCLAW_API_KEY is used only for the declared AI API feature

✓ No access to sensitive paths (~/.ssh, ~/.aws, .env files)

✓ No base64 encoding, obfuscation, or anti-analysis patterns

✓ No suspicious third-party dependencies — only standard library + openclaw SDK

✓ No persistence mechanisms, reverse shells, or C2 communication

✓ Clean, readable codebase with straightforward business logic