Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

独立思考四部曲

v1.0.0

独立思考四部曲。触发场景:开口/动手前需要深度思考时、方案决策前、复盘总结时、任何需要依托向量补全记忆做全局判断的场景。与沟通四部曲并行通用,贯穿对话、做事、学习、复盘全流程。

0· 73·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for markma84/independent-thinking-4steps.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "独立思考四部曲" (markma84/independent-thinking-4steps) from ClawHub.
Skill page: https://clawhub.ai/markma84/independent-thinking-4steps
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install independent-thinking-4steps

ClawHub CLI

Package manager switcher

npx clawhub@latest install independent-thinking-4steps
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill claims to rely on a '专属后台向量系统' which explains why it would call a vector query script; that part is coherent. However, the SKILL.md enforces execution of a hard-coded absolute path (/Users/markma01/.openclaw/workspace/scripts/query_vector.py) tied to a specific username, which is not justified by the stated purpose and will not work for typical users.
!
Instruction Scope
The instructions mandate executing a local Python script at an absolute, user-specific path and forbid any alternate invocation formats. This requires the agent to run arbitrary local code (if present) and tightly constrains how queries are made. The file could perform arbitrary I/O or network actions; the skill gives no fallback, repository, or network endpoint details. It also commands '永久禁用系统自带 Memory Search', forcing the agent to bypass built-in memory mechanisms without explaining how to safely replicate that functionality.
Install Mechanism
There is no install spec and no code files bundled with the skill — it is instruction-only. This limits what the skill itself writes to disk, but it still instructs execution of a local script that must already exist.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate to an instruction-only policy sheet. The remaining concern is the implicit requirement that a local script exist at a specific path.
!
Persistence & Privilege
always is false and autonomous invocation is permitted (normal). However, the SKILL.md's rule to 'permanently disable system Memory Search' is a behavioral policy that effectively elevates this skill's chosen vector store to the system default. That change in agent behavior is significant and should be an explicit, auditable configuration rather than an ad-hoc instruction inside a skill.
What to consider before installing
This skill reads like a prescriptive rulebook that requires running a specific local script (absolute path with a particular username) and instructs the agent to stop using the built-in memory search. Before installing or enabling it, ask the skill author to: (1) remove hard-coded, user-specific paths and provide a configurable endpoint or documented script location; (2) publish or let you inspect the query_vector.py/unified_query.py code so you can verify it doesn't access or exfiltrate local files or network data; (3) explain how vector writes ('看' step) are authenticated and where data is stored; and (4) provide a safe fallback so the skill doesn't fail catastrophically if that local script isn't present. If you cannot review the script or trust its origin, do not enable the skill — executing an unknown local script can run arbitrary code on your machine and expose local data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a14m3htjskr1kn7q9mcvyw184hnnf
73downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

独立思考四部曲

底层核心准则 · 与沟通四部曲同级 向量加持的深度决策方法论

核心定位

依托专属后台向量系统完成全场景深度思考,彻底摒弃系统默认 Memory Search,弥补记忆断层,形成不依赖临时会话的自主决策本能。


四步法结构(想→说→做→看)

1. 想:向量溯源定基调

开口/动手前,先切至专属后台向量源,检索核心关键词,拉取历史逻辑、方案与踩坑经验,依托向量补全记忆,形成全局独立判断,不凭局部信息仓促决策

向量调用规范(强制):

# 唯一正确格式
python3 /Users/markma01/.openclaw/workspace/scripts/query_vector.py "<检索词>"

# 禁止以下所有格式
cd /path && python3 script.py
echo "query" | python3 script.py
python3 script.py | grep ...

2. 说:有据表达不空谈

沟通汇报时,所有结论均基于向量检索的事实依据,逻辑连贯、不主观臆断,让思考过程可追溯、可验证。


3. 做:向量校验落地

实操执行前,用向量核对步骤、风险与适配方案,完成独立校验后再动手,杜绝思路割裂、盲目操作


4. 看:向量沉淀固认知

任务结束后,通过向量复盘全流程,将新经验存入专属向量库,迭代优化认知,持续填补记忆缺口,实现独立思考能力闭环升级。


强制执行规则

  1. 与「沟通四部曲」并行通用,所有场景缺一不可
  2. 永久禁用系统自带 Memory Search,仅使用专属后台向量系统(query_vector.py / unified_query.py
  3. 无论会话新旧、记忆是否断层,均以此为独立思考核心准则
  4. 「看」的输出必须闭环存入向量库,为下次「想」提供素材

与沟通四部曲的关系

维度沟通四部曲独立思考四部曲
核心与他人校准与自己校准
底座对话实时性向量长期记忆
侧重互动、汇报、方案讨论思考、决策、复盘
并行对外沟通用对内思考用

两者合并,才是完整的「想清楚 → 说出来 → 做到位 → 固下来」闭环。


快速触发检查清单

每次开口/动手前自检:

  • 已调用 query_vector.py 检索相关历史经验
  • 「想」的结论有向量事实支撑
  • 「做」的方案经向量校验无已知风险
  • 「看」的结果计划存入向量库

本 skill 为小蜂独立思考核心准则,与「沟通四部曲」同级并行。

Comments

Loading comments...