扫描报告
0 /100
semantic-vector-store
Semantic vector store providing embedding and similarity search for OpenClaw memory architecture
A legitimate semantic vector store skill that provides vector embedding and similarity search capabilities using sentence-transformers and FAISS. No malicious behavior detected.
可以安装
This skill is safe to use. It performs only its documented functionality - semantic vector storage and search.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | WRITE | ✓ 一致 | SQLite DB write to ~/.config/cortexgraph/ for intended storage |
| 网络访问 | READ | READ | ✓ 一致 | Downloads embedding models from HuggingFace |
| 命令执行 | NONE | NONE | — | No shell execution observed |
| 环境变量 | NONE | NONE | — | No sensitive env access |
| 数据库 | WRITE | WRITE | ✓ 一致 | SQLite write operations in VectorStore class |
1 项发现
中危 外部 URL 外部 URL
https://clawhub.com/docs/skill-dev SKILL.md:183 目录结构
2 文件 · 28.6 KB · 843 行 Python 1f · 657L
Markdown 1f · 186L
├─
▾
scripts
│ └─
semantic_vector_store.py
Python
└─
SKILL.md
Markdown
依赖分析 4 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
sentence-transformers | * | pip | 否 | Optional dependency with fallback |
faiss | * | pip | 否 | Optional dependency with fallback |
numpy | * | pip | 否 | Standard ML dependency |
pickle | N/A | stdlib | 否 | Used for internal vector serialization only |
安全亮点
✓ Uses only standard Python libraries plus optional ML libraries (sentence-transformers, faiss)
✓ No shell command execution or subprocess usage
✓ No credential harvesting or sensitive file access
✓ No network exfiltration or C2 communication
✓ No code obfuscation or base64-encoded execution
✓ Pickle usage is limited to internal vector storage (not deserializing untrusted external data)
✓ Proper error handling with try/except blocks throughout
✓ Database path is confined to expected ~/.config/cortexgraph/ location
✓ Dependencies are optional (graceful fallback to stub when unavailable)