通用工程师 开发规范与代码质量

PassAudited by VirusTotal on May 8, 2026.

Overview

Type: OpenClaw Skill Name: common-development-standards Version: 1.1.0 The skill bundle defines development standards, code quality rules, and a multi-agent collaboration protocol for the WelineFramework. The instructions in SKILL.md focus on maintaining repository hygiene, enforcing coding constraints (e.g., avoiding 'die' or 'exit' in runtime code, using i18n), and establishing a structured escalation process to a technical lead. No indicators of data exfiltration, malicious execution, or harmful prompt injection were found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Issue details from the user's development task may be shared with the named Technical Lead in environments that support such notifications.

Why it was flagged

The skill directs the agent to share discovered issue or risk information with a named Technical Lead/agent. This is disclosed and aligned with its collaboration-hub role, but users should be aware of where task context may be sent.

Skill content
If any issue, risk, blocker, unclear ownership, or cross-boundary impact is found, notify `@Weline-技术主管` using the required problem report format.
Recommendation

Use in the intended Weline workspace and avoid including secrets, credentials, or unrelated private data in escalation reports.

What this means

A local test server may be started during relevant validation work, which can use local resources and open a local port.

Why it was flagged

The skill may cause local runtime validation by starting a WLS test instance. This is purpose-aligned for engineering validation and bounded by a dedicated port/name plus an explicit stop instruction.

Skill content
Always start a dedicated WLS test instance with port `9502+` and a unique name such as `ai-test-{timestamp}` when WLS validation is required. Always stop the dedicated WLS test instance after validation.
Recommendation

Confirm WLS validation is needed before running it and verify the dedicated test instance is stopped afterward.