中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 5/100
Last scan:1 day ago Rescan
5 /100
awesome-closet-stylist
Maintain a persistent personal wardrobe, answer wardrobe questions, and recommend outfits from existing clothes with natural-language responses.
This is a pure documentation-based wardrobe management skill with no executable code, scripts, or hidden functionality. All capabilities are clearly declared and aligned between documentation and implementation.
Skill Nameawesome-closet-stylist
Duration38.1s
Enginepi
✓
Safe to install
No action required. This skill is safe to use as it only manages local wardrobe data with declared weather API integration.
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned SKILL.md declares writes to user/wardrobe.json, user/preference.json, user/confi…
Network READ READ ✓ Aligned weather.md:49-70 documents weather API calls to amap.com and qweather.com
Shell NONE NONE — No shell commands except documented curl for weather APIs
Environment NONE NONE — No environment variable access detected
Skill Invoke NONE NONE — Only references openclaw hooks list command, no arbitrary skill invocation
Clipboard NONE NONE — No clipboard access detected
Browser READ READ ✓ Aligned weather.md:91-107 documents browser fallback for weather when APIs unavailable
Database NONE NONE — No database access detected
6 findings
🔗
Medium External URL 外部 URL
https://restapi.amap.com/v3/weather/weatherInfo
sub-skills/weather.md:49
🔗
Medium External URL 外部 URL
https://restapi.amap.com/v3/weather/weatherInfo?key=
sub-skills/weather.md:54
🔗
Medium External URL 外部 URL
https://devapi.qweather.com/v7/weather/now
sub-skills/weather.md:65
🔗
Medium External URL 外部 URL
https://devapi.qweather.com/v7/weather/now?key=
sub-skills/weather.md:70
🔗
Medium External URL 外部 URL
https://www.weather.com.cn/
sub-skills/weather.md:91
🔗
Medium External URL 外部 URL
https://dev.qweather.com/
sub-skills/weather.md:107

File Tree

11 files · 29.6 KB · 688 lines
Markdown 7f · 610L JSON 4f · 78L
├─ ▾ 📁 evals
│ └─ 📋 evals.json JSON 61L · 3.4 KB
├─ ▾ 📁 sub-skills
│ ├─ 📝 clothing-notes.md Markdown 61L · 2.8 KB
│ ├─ 📝 outfit-recommendation.md Markdown 73L · 2.7 KB
│ ├─ 📝 user-preference.md Markdown 80L · 3.0 KB
│ ├─ 📝 wardrobe-crud.md Markdown 81L · 4.2 KB
│ └─ 📝 weather.md Markdown 116L · 4.0 KB
├─ ▾ 📁 user
│ ├─ 🔑 config.json ⚠ JSON 4L · 47 B
│ ├─ 📋 preference.json JSON 9L · 170 B
│ └─ 📋 wardrobe.json JSON 4L · 34 B
├─ 📝 README.md Markdown 95L · 4.3 KB
└─ 📝 SKILL.md Markdown 104L · 5.0 KB

Security Positives

✓ Pure documentation-based skill with no executable code or scripts
✓ All capabilities clearly declared in SKILL.md and sub-skills
✓ Documentation is comprehensive and consistent across all files
✓ User data stays local in user/ directory (wardrobe.json, preference.json, config.json)
✓ Weather API keys are user-provided and stored locally, not exfiltrated
✓ No obfuscation techniques (base64, eval, encoded commands)
✓ No credential harvesting or data exfiltration
✓ Hooks feature requires explicit user consent before enabling
✓ No supply chain dependencies or external packages
✓ Clear intent routing prevents scope creep