扫描报告
0 /100
headless-oauth
Authorize any OAuth CLI on a headless server where the agent and the user are on separate machines
Pure documentation/instructional skill with no executable code. Teaches agents how to guide users through OAuth flows on headless servers using standard CLI patterns.
可以安装
This skill is safe to use. No security concerns identified.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in skill |
| 网络访问 | NONE | NONE | — | No direct network calls; user handles browser on their machine |
| 命令执行 | NONE | NONE | — | No shell execution in skill; references CLI tool flags only |
| 环境变量 | NONE | NONE | — | No environment variable access |
| 技能调用 | NONE | NONE | — | No cross-skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | User handles browser on local machine; not agent |
| 数据库 | NONE | NONE | — | No database access |
7 项发现
中危 外部 URL 外部 URL
https://openclaw.ai README.md:3 中危 外部 URL 外部 URL
https://img.shields.io/badge/clawhub-headless--oauth-blue README.md:5 中危 外部 URL 外部 URL
https://clawhub.ai/skills/headless-oauth README.md:5 中危 外部 URL 外部 URL
https://img.shields.io/badge/License-MIT--0-green.svg README.md:6 中危 外部 URL 外部 URL
https://opensource.org/licenses/MIT-0 README.md:6 中危 外部 URL 外部 URL
https://img.shields.io/badge/OpenClaw-compatible-purple README.md:7 中危 外部 URL 外部 URL
https://igorivanter.com README.md:96 目录结构
2 文件 · 9.1 KB · 255 行 Markdown 2f · 255L
├─
README.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ No executable code present - purely instructional documentation
✓ Clear explanation of the server/user machine split for OAuth flows
✓ Mentions keyring security best practices (don't persist credentials)
✓ Documents legitimate CLI tools (gh, gcloud, gog) with proper flags
✓ curl usage is declared and necessary for the callback relay pattern
✓ No credential exfiltration or harvesting mechanisms
✓ No obfuscated code or hidden functionality