中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 5/100
上次扫描：21 小时前 重新扫描
5 /100
andara-self-improvement
Captures learnings, errors, and corrections to enable continuous improvement for AI agents
This is a legitimate self-improvement logging skill that captures AI agent learnings, errors, and corrections. All functionality is fully documented, with appropriate safety checks in path validation.
技能名称andara-self-improvement
分析耗时28.2s
引擎pi
✓
可以安装
This skill is safe to use. No security concerns identified.
资源类型声明权限推断权限状态证据
文件系统 WRITE WRITE ✓ 一致 Creates .learnings/ and ./skills/ directories, documented in SKILL.md lines 1-64…
命令执行 READ READ ✓ 一致 Reads CLAUDE_TOOL_OUTPUT env var in error-detector.sh, documented
网络访问 NONE NONE — No network calls found
环境变量 READ READ ✓ 一致 Reads CLAUDE_TOOL_OUTPUT for error detection
1 项发现
🔗
中危 外部 URL 外部 URL
https://agentskills.io/specification
SKILL.md:557

目录结构

12 文件 · 53.2 KB · 2151 行
Markdown 7f · 1737L Shell 3f · 296L TypeScript 1f · 62L JavaScript 1f · 56L
├─ ▾ 📁 assets
│ ├─ 📝 LEARNINGS.md Markdown 45L · 1.1 KB
│ └─ 📝 SKILL-TEMPLATE.md Markdown 177L · 3.3 KB
├─ ▾ 📁 hooks
│ └─ ▾ 📁 openclaw
│ ├─ 📜 handler.js JavaScript 56L · 1.6 KB
│ ├─ 📜 handler.ts TypeScript 62L · 1.8 KB
│ └─ 📝 HOOK.md Markdown 23L · 589 B
├─ ▾ 📁 references
│ ├─ 📝 examples.md Markdown 374L · 8.1 KB
│ ├─ 📝 hooks-setup.md Markdown 223L · 4.8 KB
│ └─ 📝 openclaw-integration.md Markdown 248L · 5.5 KB
├─ ▾ 📁 scripts
│ ├─ 🔧 activator.sh Shell 20L · 680 B
│ ├─ 🔧 error-detector.sh Shell 55L · 1.3 KB
│ └─ 🔧 extract-skill.sh Shell 221L · 5.2 KB
└─ 📝 SKILL.md Markdown 647L · 19.2 KB

安全亮点

✓ All shell scripts are documented in SKILL.md
✓ extract-skill.sh has path traversal protection with .. validation
✓ Output paths are restricted to relative paths under current directory
✓ No credential harvesting or exfiltration
✓ No base64 encoding or obfuscation
✓ Hooks are opt-in and require explicit configuration
✓ External URLs are standard documentation links
✓ Safe error detection through pattern matching on tool output