wand-skill222
v1.0.1帮助开发者在项目中快速集成和使用 Wand UI 2.0 移动端组件库。该技能提供完整的组件 API 参考、使用示例和最佳实践。适用于以下场景：(1) 需要在 Vue 2.0 项目中使用 Wand UI 组件；(2) 查询特定组件的属性、事件或插槽；(3) 需要组件使用示例和代码模板；(4) 解决 Wand UI...
⭐ 0· 88·0 current·0 all-time
byZane@qzhouz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Wand UI docs and examples) match the files and instructions. The skill only contains documentation and example code for @weiyi/wand-ui and does not request unrelated capabilities or credentials.
Instruction Scope
SKILL.md and reference docs only provide usage examples, API reference, and setup instructions. Minor note: wand-skill-README.md contains example copy/paths that reference a local filesystem path (/Users/zane/...), which is a privacy/cleanliness issue in the docs but not an operational risk — the skill does not instruct the agent to read arbitrary host files or send data externally.
Install Mechanism
No install spec or code files to execute; the skill is instruction-only. The README shows manual copy/unzip examples, but no automated download or archive extraction from remote URLs.
Credentials
The skill declares no required environment variables, credentials, or config paths. The documentation references installing the upstream npm package (@weiyi/wand-ui) which would require normal npm operations when you choose to install that package yourself.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. It does not modify other skills or system-wide settings.
Scan Findings in Context
[no_findings] expected: Regex scanner reported no findings. That is expected because this is an instruction-only skill with no executable code files for the scanner to analyze.
Assessment
This skill is documentation-only and appears coherent for its stated purpose. Before relying on it in a project: (1) if you install the referenced package, install @weiyi/wand-ui from the official registry (npm/yarn) and review that package's source and maintainership to avoid typosquatting; (2) ignore or update any hard-coded local paths in the README (e.g., /Users/zane/...) — they are example artifacts, not instructions to access your system; (3) if you plan to copy the skill into an agent directory, ensure the files contain only documentation you expect; (4) as always, audit third-party dependencies (build tooling, babel plugins) the examples recommend before adding them to a production project.Like a lobster shell, security has layers — review code before you run it.
latestvk971jbpkjm4xfn0x4sa2k9cncn83yeb2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.