可信 — 风险评分 0/100
上次扫描:1 天前 重新扫描
0 /100
openclaw-recovery-drill
Test OpenClaw recovery readiness, rehearse backup/restore, run disaster-recovery drills
The skill is a legitimate OpenClaw disaster-recovery readiness checker that safely audits workspace and backup state without any malicious behavior.
技能名称openclaw-recovery-drill
分析耗时24.7s
引擎pi
可以安装
No action required. This skill performs read-only filesystem checks to verify backup readiness.
资源类型声明权限推断权限状态证据
文件系统 NONE READ ✓ 一致 scripts/recovery-drill.mjs:32 - fs.existsSync() for backup/workspace checks only
网络访问 NONE NONE No network imports or calls in codebase
命令执行 NONE NONE No shell execution; only uses node child_process.execFileSync in tests (not runt…
环境变量 NONE NONE os.homedir() used for path resolution only, no env iteration

目录结构

6 文件 · 13.0 KB · 360 行
JavaScript 2f · 173L Markdown 3f · 152L JSON 1f · 35L
├─ 📁 references
│ └─ 📝 drill-checklist.md Markdown 32L · 1.2 KB
├─ 📁 scripts
│ └─ 📜 recovery-drill.mjs JavaScript 137L · 5.7 KB
├─ 📁 tests
│ └─ 📜 test.mjs JavaScript 36L · 1.5 KB
├─ 📋 package.json JSON 35L · 977 B
├─ 📝 README.md Markdown 62L · 1.5 KB
└─ 📝 SKILL.md Markdown 58L · 2.1 KB

安全亮点

✓ No network requests or external communications
✓ No shell execution during runtime (only in tests for self-validation)
✓ No credential harvesting or sensitive file access (~/.ssh, ~/.aws, .env)
✓ No obfuscation, base64, or eval patterns
✓ No data exfiltration or C2 communication
✓ Read-only filesystem operations limited to backup/workspace existence checks
✓ Documentation accurately describes script behavior
✓ No supply chain risks; only uses Node.js built-in modules (fs, os, path)
✓ MIT license, OpenClaw Community author