Security audit
Security checks for vulnerabilities and agentic risk
This data collection skill mostly does what it advertises, but it also ships under-disclosed OpenClaw platform-management methods that could install, uninstall, execute, or upload other skills if given a valid API key.
Review carefully before installing. Only use this skill with least-privilege, read-only database/API credentials; avoid giving it OpenClaw admin or publishing tokens; configure exports to non-sensitive paths; and enable scheduled collection only when you understand what systems it will repeatedly access.
# 安装: pip install -r requirements-dev.txt # 测试框架 pytest>=7.0.0 pytest-cov>=4.0.0 pytest-mock>=3.10.0 pytest-asyncio>=0.21.0
# 测试框架 pytest>=7.0.0 pytest-cov>=4.0.0 pytest-mock>=3.10.0 pytest-asyncio>=0.21.0
# 测试框架 pytest>=7.0.0 pytest-cov>=4.0.0 pytest-mock>=3.10.0 pytest-asyncio>=0.21.0 # 代码质量和风格
pytest>=7.0.0 pytest-cov>=4.0.0 pytest-mock>=3.10.0 pytest-asyncio>=0.21.0 # 代码质量和风格 black>=23.0.0
pytest-asyncio>=0.21.0 # 代码质量和风格 black>=23.0.0 flake8>=6.0.0 isort>=5.12.0 mypy>=1.0.0
# 代码质量和风格 black>=23.0.0 flake8>=6.0.0 isort>=5.12.0 mypy>=1.0.0 pre-commit>=3.0.0
# 代码质量和风格 black>=23.0.0 flake8>=6.0.0 isort>=5.12.0 mypy>=1.0.0 pre-commit>=3.0.0
black>=23.0.0 flake8>=6.0.0 isort>=5.12.0 mypy>=1.0.0 pre-commit>=3.0.0 # 文档生成
flake8>=6.0.0 isort>=5.12.0 mypy>=1.0.0 pre-commit>=3.0.0 # 文档生成 sphinx>=7.0.0
pre-commit>=3.0.0 # 文档生成 sphinx>=7.0.0 sphinx-rtd-theme>=1.3.0 myst-parser>=2.0.0
# 文档生成 sphinx>=7.0.0 sphinx-rtd-theme>=1.3.0 myst-parser>=2.0.0 # 构建和发布
# 文档生成 sphinx>=7.0.0 sphinx-rtd-theme>=1.3.0 myst-parser>=2.0.0 # 构建和发布 build>=0.10.0
myst-parser>=2.0.0 # 构建和发布 build>=0.10.0 twine>=4.0.0 wheel>=0.40.0
# 构建和发布 build>=0.10.0 twine>=4.0.0 wheel>=0.40.0 # 其他开发工具
# 构建和发布 build>=0.10.0 twine>=4.0.0 wheel>=0.40.0 # 其他开发工具 ipython>=8.15.0
No suspicious patterns detected.
