中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 5/100
上次扫描：1 天前 重新扫描
5 /100
awesome-closet-stylist
Maintain a persistent personal wardrobe, answer wardrobe questions, and recommend outfits from existing clothes with natural-language responses.
This is a pure documentation-based wardrobe management skill with no executable code, scripts, or hidden functionality. All capabilities are clearly declared and aligned between documentation and implementation.
技能名称awesome-closet-stylist
分析耗时38.1s
引擎pi
✓
可以安装
No action required. This skill is safe to use as it only manages local wardrobe data with declared weather API integration.
资源类型声明权限推断权限状态证据
文件系统 WRITE WRITE ✓ 一致 SKILL.md declares writes to user/wardrobe.json, user/preference.json, user/confi…
网络访问 READ READ ✓ 一致 weather.md:49-70 documents weather API calls to amap.com and qweather.com
命令执行 NONE NONE — No shell commands except documented curl for weather APIs
环境变量 NONE NONE — No environment variable access detected
技能调用 NONE NONE — Only references openclaw hooks list command, no arbitrary skill invocation
剪贴板 NONE NONE — No clipboard access detected
浏览器 READ READ ✓ 一致 weather.md:91-107 documents browser fallback for weather when APIs unavailable
数据库 NONE NONE — No database access detected
6 项发现
🔗
中危 外部 URL 外部 URL
https://restapi.amap.com/v3/weather/weatherInfo
sub-skills/weather.md:49
🔗
中危 外部 URL 外部 URL
https://restapi.amap.com/v3/weather/weatherInfo?key=
sub-skills/weather.md:54
🔗
中危 外部 URL 外部 URL
https://devapi.qweather.com/v7/weather/now
sub-skills/weather.md:65
🔗
中危 外部 URL 外部 URL
https://devapi.qweather.com/v7/weather/now?key=
sub-skills/weather.md:70
🔗
中危 外部 URL 外部 URL
https://www.weather.com.cn/
sub-skills/weather.md:91
🔗
中危 外部 URL 外部 URL
https://dev.qweather.com/
sub-skills/weather.md:107

目录结构

11 文件 · 29.6 KB · 688 行
Markdown 7f · 610L JSON 4f · 78L
├─ ▾ 📁 evals
│ └─ 📋 evals.json JSON 61L · 3.4 KB
├─ ▾ 📁 sub-skills
│ ├─ 📝 clothing-notes.md Markdown 61L · 2.8 KB
│ ├─ 📝 outfit-recommendation.md Markdown 73L · 2.7 KB
│ ├─ 📝 user-preference.md Markdown 80L · 3.0 KB
│ ├─ 📝 wardrobe-crud.md Markdown 81L · 4.2 KB
│ └─ 📝 weather.md Markdown 116L · 4.0 KB
├─ ▾ 📁 user
│ ├─ 🔑 config.json ⚠ JSON 4L · 47 B
│ ├─ 📋 preference.json JSON 9L · 170 B
│ └─ 📋 wardrobe.json JSON 4L · 34 B
├─ 📝 README.md Markdown 95L · 4.3 KB
└─ 📝 SKILL.md Markdown 104L · 5.0 KB

安全亮点

✓ Pure documentation-based skill with no executable code or scripts
✓ All capabilities clearly declared in SKILL.md and sub-skills
✓ Documentation is comprehensive and consistent across all files
✓ User data stays local in user/ directory (wardrobe.json, preference.json, config.json)
✓ Weather API keys are user-provided and stored locally, not exfiltrated
✓ No obfuscation techniques (base64, eval, encoded commands)
✓ No credential harvesting or data exfiltration
✓ Hooks feature requires explicit user consent before enabling
✓ No supply chain dependencies or external packages
✓ Clear intent routing prevents scope creep