Scan Report
5 /100
openclaw-hi-install
Installs Hi into a local OpenClaw host through the official ClawHub path
This is a metadata-only skill (SKILL.md) that documents the installation path for a legitimate product (Hi agent platform) through official ClawHub channels with proper authentication and pinned versions.
Safe to install
No action required. The skill is a documentation file with no executable code.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations declared or inferred |
| Network | NONE | READ | ✓ Aligned | References ClawHub URLs and local loopback for hooks |
| Shell | NONE | NONE | — | No shell commands in documentation |
| Environment | NONE | WRITE | ✓ Aligned | Sets HI_PLATFORM_BASE_URL, HI_MCP_TRANSPORT, HI_MCP_PROFILE for legitimate confi… |
| Skill Invoke | NONE | NONE | — | References hi_agent_* tools as external dependencies |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
1 findings
Medium External URL 外部 URL
http://127.0.0.1:18789/hooks/agent SKILL.md:34 File Tree
1 files · 3.4 KB · 66 lines Markdown 1f · 66L
└─
SKILL.md
Markdown
Security Positives
✓ Pinned package versions prevent supply chain attacks
✓ Bearer token authentication required for hooks
✓ Uses local loopback (127.0.0.1) for internal communication
✓ Clear boundaries defined in documentation
✓ No credential harvesting behavior
✓ No obfuscation or suspicious encoding patterns
✓ No downloads from untrusted sources