扫描报告
5 /100
openclaw-hi-install
Installs Hi into a local OpenClaw host through the official ClawHub path
This is a metadata-only skill (SKILL.md) that documents the installation path for a legitimate product (Hi agent platform) through official ClawHub channels with proper authentication and pinned versions.
可以安装
No action required. The skill is a documentation file with no executable code.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations declared or inferred |
| 网络访问 | NONE | READ | ✓ 一致 | References ClawHub URLs and local loopback for hooks |
| 命令执行 | NONE | NONE | — | No shell commands in documentation |
| 环境变量 | NONE | WRITE | ✓ 一致 | Sets HI_PLATFORM_BASE_URL, HI_MCP_TRANSPORT, HI_MCP_PROFILE for legitimate confi… |
| 技能调用 | NONE | NONE | — | References hi_agent_* tools as external dependencies |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser access |
| 数据库 | NONE | NONE | — | No database access |
1 项发现
中危 外部 URL 外部 URL
http://127.0.0.1:18789/hooks/agent SKILL.md:34 目录结构
1 文件 · 3.4 KB · 66 行 Markdown 1f · 66L
└─
SKILL.md
Markdown
安全亮点
✓ Pinned package versions prevent supply chain attacks
✓ Bearer token authentication required for hooks
✓ Uses local loopback (127.0.0.1) for internal communication
✓ Clear boundaries defined in documentation
✓ No credential harvesting behavior
✓ No obfuscation or suspicious encoding patterns
✓ No downloads from untrusted sources