可信 — 风险评分 5/100
上次扫描:19 小时前 重新扫描
5 /100
openclaw-auto-updater-litiao
Schedule automatic OpenClaw and skill updates with reliable cron templates, timezone-safe scheduling, and clear summary outputs.
This is a legitimate OpenClaw auto-updater skill that schedules updates via the documented `openclaw cron add` CLI command with no hidden scripts, credential access, or exfiltration behavior.
技能名称openclaw-auto-updater-litiao
分析耗时31.1s
引擎pi
可以安装
Approve for use. The skill is a pure documentation-and-CLI-invocation package with no executable code beyond the documented `openclaw` and `clawdhub` commands.
资源类型声明权限推断权限状态证据
命令执行 READ READ ✓ 一致 SKILL.md documents openclaw cron add / clawdhub update --all CLI invocations; no…
文件系统 READ READ ✓ 一致 Skill contains only markdown documentation; agent-guide.md describes an optional…
网络访问 READ READ ✓ 一致 Only openclaw/clawdhub update commands (inherent to their function), no raw IP r…
环境变量 NONE NONE No environment variable access found in any file
技能调用 NONE NONE No inter-skill invocation documented or found
剪贴板 NONE NONE No clipboard access found
浏览器 NONE NONE No browser access found
数据库 NONE NONE No database access found

目录结构

4 文件 · 7.6 KB · 305 行
Markdown 3f · 300L JSON 1f · 5L
├─ 📁 references
│ ├─ 📝 agent-guide.md Markdown 123L · 3.1 KB
│ └─ 📝 summary-examples.md Markdown 91L · 1.9 KB
├─ 📋 _meta.json JSON 5L · 140 B
└─ 📝 SKILL.md Markdown 86L · 2.4 KB

安全亮点

✓ Skill contains only Markdown documentation files — no executable code distributed
✓ Core functionality uses only documented CLI commands (openclaw cron add, clawdhub update)
✓ No network requests to raw IPs, no external data exfiltration
✓ No credential harvesting, no environment variable enumeration, no sensitive path access
✓ No obfuscation techniques (base64, eval, atob) detected
✓ No supply chain risk — no dependencies or package files included
✓ No persistence mechanisms (cron written to the system is via the documented openclaw CLI, not a custom script)