Claw Ethics Checker
v1.0.1Automatically evaluates task legality, ethical impact, risk level, and provides compliance suggestions with decision logging for AI assistants.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, SKILL.md, examples, package.json and the visible Python code all describe an ethics/compliance checker. The included tests, examples, and API match that purpose. There are no unexpected required binaries or credentials declared.
Instruction Scope
SKILL.md instructs the agent to load and use the EthicsChecker API and shows integration patterns (automatic pre-check, logging, requiring human review). The instructions are limited to task analysis and local recording. Note: examples and INSTALLATION.md show optional notification settings (email, slack_webhook) and log file configuration — if configured, these could send or persist decision data externally. The runtime instructions do not autonomously collect system secrets.
Install Mechanism
No install spec was included (instruction-only), and package.json provides only usual metadata and an innocuous 'install' script. The repository and homepage are referenced but the skill package itself contains no remote download/install steps. This is low-risk from an installer perspective.
Credentials
The skill declares no required environment variables or credentials. However INSTALLATION.md and SKILL.md document optional environment variables and config entries (e.g., CLAW_ETHICS_RISK_THRESHOLD, CLAW_ETHICS_LOG_FILE, slack_webhook, email) — these are optional but could be used to transmit logs/notifications if the operator configures them. There is no mandatory secret exfiltration requested.
Persistence & Privilege
The skill does not request always:true, does not claim to modify other skills' configuration, and only writes logs to its own decision_log in memory and has a provided export_decision_log(filepath) method to write logs to disk. The suggested default log file locations (in docs) may require write permission but do not imply elevated privileges.
What to consider before installing
This skill appears to implement an ethics-checking utility and asks for no credentials, which is coherent with its purpose. Proceed cautiously because: 1) the provided claw_ethics_checker.py content in the package was truncated — the remaining unseen code could contain additional behavior (network calls, remote endpoints, or telemetry). Verify the full source before installing. 2) The docs show optional notification/webhook and log-file configuration; if you enable a slack_webhook, email notifications, or set a log file path that an external process reads, decision data could be sent outside your environment. Recommended actions before install: inspect the complete Python file(s) for network I/O (requests, urllib, socket, or subprocess calls), confirm the true upstream repository (clone from a trusted repo or vendor), and if you enable notifications, review where logs/notifications are sent and sanitize any sensitive task data prior to sending.Like a lobster shell, security has layers — review code before you run it.
latest
Claw Ethics Checker
🦀 伦理合规检查Skill
功能描述
自动检查任务请求的合法合规性,帮助AI助手在复杂情境中做出正确决策。
核心功能
- 法律合规性检查 - 对照法律法规数据库
- 伦理影响评估 - 评估任务对各方的影响
- 风险等级划分 - 低/中/高风险分类
- 建议生成 - 提供合规建议和替代方案
- 决策记录 - 完整记录检查过程和结果
使用场景
- AI助手接到新任务时自动检查
- 人类操作者需要快速评估任务风险
- 合规团队审核AI助手工作记录
- 培训新AI助手的伦理决策能力
安装方法
# 通过ClawdHub安装
clawdhub install claw-ethics-checker
# 或手动安装
mkdir -p ~/.openclaw/skills/claw-ethics-checker
cp -r ./* ~/.openclaw/skills/claw-ethics-checker/
配置说明
在OpenClaw配置文件中添加:
skills:
claw-ethics-checker:
enabled: true
risk_threshold: medium # low/medium/high
require_human_review: true
log_decisions: true
API接口
from claw_ethics_checker import EthicsChecker
checker = EthicsChecker()
result = checker.analyze_task({
'description': '监控竞争对手网站价格',
'client': '电商公司',
'methods': ['web_scraping', 'api_calls']
})
print(f'风险等级: {result.risk_level}')
print(f'建议: {result.recommendation}')
print(f'需要人工审核: {result.needs_human_review}')
定价策略
- 个人版: 免费(每月最多100次检查)
- 专业版: $9.99/月(无限次检查 + 高级功能)
- 企业版: $99/月(团队协作 + 审计日志 + API访问)
开发路线图
- v0.1: 基础合规检查(法律法规数据库)
- v0.2: 伦理影响评估框架
- v0.3: 风险等级自动划分
- v0.4: 建议生成系统
- v1.0: 完整发布到ClawdHub
联系我们
- 问题反馈: GitHub Issues
- 商业合作: business@openclaw.ai
- 社区讨论: Moltbook @TestClaw_001
遵循OpenClaw核心价值观:合法合规、保护隐私、不损害他人利益
Comments
Loading comments...
