dify-code-interpreter

解释任意编程语言代码的语法、逻辑、用途与实现细节，支持多种语言并返回结构化说明。

Security Scan

The skill’s purpose (explain code via a Dify chatflow) is plausible, but the SKILL.md requires an API endpoint/key and other runtime params that are not declared in the registry metadata and even contains a hard-coded-looking API key — this mismatch and the potential to send code to an external service are concerning.

Purpose & Capability

The SKILL.md documents required configuration parameters (dify_base_url, api_key, chatflow_name) and runtime dependencies (Python, requests). The registry metadata claims no required env vars, no credentials, and no install steps. That mismatch means the manifest does not truthfully describe what the skill needs to operate.

Instruction Scope

The instructions say the skill sends code to a Dify chatflow (and references Ollama/qwen3 and a private knowledge base). Sending arbitrary code snippets to an external service may leak sensitive code or secrets. The SKILL.md does not explicitly constrain what inputs are safe to send or instruct the agent to avoid including secrets in submitted code.

Install Mechanism

There is no install spec (instruction-only), which limits on-disk changes. However, the SKILL.md lists runtime requirements (Python 3.8+, requests>=2.31.0) but provides no official install instructions — that disconnect is a documentation/packaging inconsistency to be resolved.

Credentials

The SKILL.md requires an API key and base URL for Dify (sensitive credentials), yet the registry metadata lists no required env vars or primary credential. Additionally, the SKILL.md includes a default/example API key-like value (app-pYPzaw...), which is suspicious and could indicate accidental leakage of a real key or careless documentation.

Persistence & Privilege

The skill is not marked always:true and is user-invocable only; it does not request persistent platform-wide privileges in the manifest.

What to consider before installing

Before installing, verify and correct the manifest: the SKILL.md requires a Dify base URL, chatflow name, and API key but the registry metadata declares none. Ask the publisher to (1) remove or replace any hard-coded API key/example that looks real and confirm whether it is active, (2) declare required credentials in the skill manifest so you can review them, and (3) confirm whether code snippets are sent to an external service or only processed locally. Treat code as potentially sensitive — do not use this skill with private/proprietary code until you confirm the endpoint is trusted and the API key is yours (or rotate it if it was leaked). If you cannot get clear answers, consider avoiding installation or running it only in an isolated environment with a disposable key and a local Dify/Ollama instance.

Dify Code Interpreter（dify-code-interpreter）

技能概述

基于Dify+Ollama qwen3:8b模型，结合私有知识库，详细解释任意编程语言代码片段的语法、逻辑、用途和实现细节。

版本信息

• 版本：1.0.0
• 运行时：Python 3.8+
• 依赖：requests>=2.31.0
• 适配OpenClaw版本：v2026+
• Skill ID：dify-code-interpreter（强制中划线分隔）

配置参数

参数名	类型	必填	默认值	说明
dify_base_url	string	是	http://localhost/v1	Dify API基础地址（本地部署填此值）
api_key	string	是	app-pYPzawyEGIiagRmb1IhJv4PA	Dify应用API密钥（从Dify控制台获取）
chatflow_name	string	是	代码解释器	Dify中创建的Chatflow名称

工具列表

explain-frontend-code

功能描述

解释代码片段，支持C、Vue、Python、Java等编程语言，返回结构化的语法/逻辑说明。

参数说明

参数名	类型	必填	说明
code	string	是	待解释的代码片段字符串

使用示例