中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 10/100
上次扫描：19 小时前 重新扫描
10 /100
Claude Agent
作为项目经理操作 Claude Code 完全体。包含：任务执行（提示词设计→执行→监控→质量检查→迭代→汇报）
The claude-agent skill is a well-documented project manager wrapper for Claude Code with transparent shell operations, no credential harvesting, and no data exfiltration beyond its stated notification purpose.
技能名称Claude Agent
分析耗时49.8s
引擎pi
✓
可以安装
No action needed. The skill is safe to use with standard Claude Code permissions.

安全发现 1 项

严重性 安全发现 位置
低危
Minor doc-to-code alignment gap 文档欺骗
SKILL.md states filesystem:NONE but shell scripts technically write to /tmp for PID files and logs. However, these are transient operational files, not project files.
echo $! > "$MONITOR_PID_FILE"
→ Minor cosmetic gap. Consider adding a note about /tmp transient files in SKILL.md, or document filesystem:NONE only for project workspace.
 hooks/start_claude.sh:40
资源类型声明权限推断权限状态证据
文件系统 NONE WRITE ✓ 一致 SKILL.md does not claim filesystem access; Claude Code handles actual file opera…
网络访问 READ READ ✓ 一致 openclaw CLI tool handles notifications; no direct network sockets opened
命令执行 WRITE WRITE ✓ 一致 tmux + claude subprocess in start_claude.sh:25-26; subprocess.Popen in on_comple…
环境变量 READ READ ✓ 一致 Reads CLAUDE_AGENT_CHAT_ID, CLAUDE_AGENT_CHANNEL, etc. in on_complete.py:43-68
剪贴板 NONE NONE — No clipboard access in any script
浏览器 NONE NONE — No browser automation in any script
数据库 NONE NONE — No database access in any script
7 项发现
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code
INSTALL.md:8
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code/overview
knowledge/UPDATE_PROTOCOL.md:28
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code/cli-usage
knowledge/UPDATE_PROTOCOL.md:29
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code/settings
knowledge/UPDATE_PROTOCOL.md:30
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code/hooks
knowledge/UPDATE_PROTOCOL.md:31
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code/mcp
knowledge/UPDATE_PROTOCOL.md:32
🔗
中危 外部 URL 外部 URL
https://docs.anthropic.com/en/docs/claude-code/memory
knowledge/UPDATE_PROTOCOL.md:33

目录结构

22 文件 · 76.8 KB · 2472 行
Markdown 15f · 1978L Python 1f · 246L Shell 4f · 246L Text 2f · 2L
├─ ▾ 📁 hooks
│ ├─ 🐍 on_complete.py Python 246L · 7.2 KB
│ ├─ 🔧 pane_monitor.sh Shell 116L · 4.5 KB
│ ├─ 🔧 start_claude.sh Shell 77L · 2.2 KB
│ └─ 🔧 stop_claude.sh Shell 30L · 843 B
├─ ▾ 📁 knowledge
│ ├─ 📝 capabilities.md Markdown 80L · 2.5 KB
│ ├─ 📝 changelog.md Markdown 53L · 2.1 KB
│ ├─ 📝 config_schema.md Markdown 175L · 3.5 KB
│ ├─ 📝 features.md Markdown 145L · 3.7 KB
│ ├─ 📝 prompting_patterns.md Markdown 129L · 2.8 KB
│ └─ 📝 UPDATE_PROTOCOL.md Markdown 57L · 2.0 KB
├─ ▾ 📁 references
│ └─ 📝 claude-code-reference.md Markdown 95L · 2.3 KB
├─ ▾ 📁 scripts
│ └─ 🔧 publish_clawhub.sh Shell 23L · 710 B
├─ ▾ 📁 state
│ ├─ 📄 last_updated.txt Text 1L · 11 B
│ └─ 📄 version.txt Text 1L · 7 B
├─ ▾ 📁 workflows
│ ├─ 📝 knowledge_update.md Markdown 69L · 1.6 KB
│ └─ 📝 standard_task.md Markdown 125L · 2.9 KB
├─ 📝 CHANGELOG.md Markdown 64L · 2.6 KB
├─ 📝 INSTALL.md Markdown 184L · 6.1 KB
├─ 📝 README_EN.md Markdown 119L · 5.2 KB
├─ 📝 README.md Markdown 289L · 11.9 KB
├─ 📝 SECURITY.md Markdown 36L · 1.8 KB
└─ 📝 SKILL.md Markdown 358L · 10.6 KB

依赖分析 4 项

包名版本来源已知漏洞备注
bash user-installed system 否 Shell interpreter required by scripts
tmux user-installed system 否 Terminal multiplexer required for session management
openclaw user-installed system 否 CLI tool for notifications and agent wake; used as command executor, not imported
claude user-installed system 否 Claude Code CLI, the primary target of this wrapper skill

安全亮点

✓ Uses only Python standard library (no external pip dependencies)
✓ SECURITY.md provides comprehensive hardening guidance
✓ Notification mode defaults to 'event' (minimal data disclosure)
✓ No credential harvesting or API key exfiltration
✓ All subprocess calls use the openclaw CLI tool (user-installed)
✓ No base64 encoding, eval(), or obfuscation techniques
✓ No remote script execution (curl|bash, wget|sh)
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ Clear separation: skill handles orchestration, Claude Code handles actual file operations
✓ Hardcoded fallback defaults prevent silent failures